Risk analysis and management for projects RAMP (Telford, 1998)