The Elephant in the Room: How to Create and Maintain a Risk Assessment Program