This risk assessment is used to determine where risks exist , what those risks are , and the potential or actual impact of those risks on program operations .
Risks may have an impact on program operations .