identifying the risks