Infratel interview question

How would you go about conducting a Risk assessment