Risk assessment does not just include infrastructure. Risks can also