Project portfolio risk categorisation – factor analysis results