The process of risk management for projects