how-to-determine-risk