Risk assessment procedure

Summary
Procedure for assessing risks and monitoring mitigation actions