Risk analysis and risk management