The first action to take is to analyze the risks, and this cannot be done without taking into account the activities that will be performed.