risk operational analysis