Risk assessment framework