Planning the risk assessment approach