risk management quantitative analysis