Source: https://rmas.fad.harvard.edu/files/rmas/files/conducting_a_risk_assessment_guidance.pdf