Avanade Interview Question

How would you go about a difficult risk assessment?