Risk assessment
Steps 2 and 3: Risk assessment.