A risk‐based approach