components of risk assessment