identifying hazards and control measures risk assessment