How to do the risk identification step in a risk workshop? (RISKID step 1/4)