Which hazards should appear on the project risk register?