8.9. Identify Risks