Quantitative risk analysis for project scenarios