Good Practice in Assessing Risk