How I assess the risk of investing in projects