How we analyze credit risk