How can a company effectively identify hazards?