What is a risk assessment (RA)?