Performing risk assessment