Which of the following is a component of a risk assessment?