How do analyze the risk for the web application project?