Steps in the planning phase and risk identification and response