Which of the following is not a component of performing risk management?