Assessing risks in Projects and Processes