Choosing a project risk-handling strategy: An analytical model