Developing a Structured Risk Assessment Framework for Projects