How to do credit risk analysis