monitor residual risks identify new risks