The organization's methodology for hazard identification and risk assessment shall be defined with respect to its scope, nature and timing to ensure it is proactive rather than reactive; provide for the of risks and identification of those that are to be eliminate or controlled by measures as defined in 4.3.3 and 4.3.4; be consistent with operating experience and the capabilities of risk control measures employed.