overall risk assessment example