Each situation or specific risk event identified is analysed, considering the impact of the risk, the probability of occurrence and the adequacy of the risk management process should the situation actually arise.