A practical guide to risk assessment