The problem needs to be determined and openly communicated to everyone involved.
The nature and magnitude of the problem-determined through a systematic risk assessment process-needs to be determined and openly communicated to all relevant parties.