Eight Steps for Conducting a Project Risk Assessment