Which of the following should be included in a risk scenario to be used for risk analysis?