04 – Implementing risk assessment