RISK ASSESSMENT BEST PRACTICE