Example of generic risk assessment