An approach to combining risk identification, risk analysis, and risk evaluation into a single strategy.