How do you identify, assess and manage risks? What are the steps to risk assessment and why is important?