Static and dynamic risk assessment in complex projects