Who Is Responsible For Making The Initial Risk Determination For A Device