1.2.2.2 Document the risks