Once risks have been identified, they should be analyzed for their possible effect.
When risks are identified, they should be analyzed for their effect.