What should we know about risk analysis at work?