Risk assessment can be broken down into: