Who Typically Performs Risk Assessments