Risk assessment procedure