Extending the use of risk analysis in project management