What is the composite risk management process?

What is the forst step in the composite risk management process