( ) is the process of identifying individual project risks as well as source of overall project risk, and documenting their characteristics,