what best describes a risk analysis