Domain 3: Risk Identification, Monitoring and Analysis