Step 1 - determine client’s risk profile