essential elements of risk assessment