PwC Interview Question

How would you go about creating a risk framework for an unknown environment