A systems dynamics framework for risk management of multiple autonomous underwater vehicles