In the five step composite risk management process what should be done immediately after you assess the hazards to determine the risk?