1. establishing the context
  2. identifying the risks
  3. analyse and evaluate the risks
  4. treat or manage the risks
  5. monitor and review
  6. communication and consultation
  7. record outcomes