Risk analysis generally includes estimating the risk's significance, assessing the likelihood of its occurrence, and
Risk analysis includes estimating how much of a risk there is.
Risk analysis does a bad job of estimating how much of a risk there is.