Risk and process analysis