Conducting the risk assessment