The third step of risk assessment is considering: