How to write a risk analysis