https://exprofessional.com/2018/08/01/risk-assessment-vs-ex/