managing risk attitudes in project management