Risk assessment approach