How to risk analysis?