What is a process hazard analysis and when it must be conducted?