Risk and information systems: developing the analysis · Study