PwC interview question

How would you go about creating a risk framework for an unknown environment