steps to identify risks