Identify the risks, understand their (potential) impact, assess potential interventions.