What is the first step in risk assessment for AZ-301 - Microsoft Azure Solutions Architect Expert professionals?