Towards efficient risk-identification in risk-driven development processes