Assessing people risk, infrastructure risk, and program risk will give you the best idea of how to move forward.