identifying potential risks