identifies & addresses risks