Describe the tools and techniques used for risk identification.