Which of the following is determined by the level of product risk identified?