how you will follow up on the risk assessment