Risk assessment and analysis