identify new risks implement risk reduction