Points to consider while doing risk assessment