Explain how is project risk analyzed and why does it need to be managed?