identifying hazards and vulnerabilities