How does project risk change as a project progresses?