THINKING ABOUT RISK ASSESSMENT