（ ） is the process of identifying individual project risks as well as source of overall project risk, and documenting their characteristics.