Which of the following is the first step in the standard five-step risk assessment process recommended by the HSE?