Who is Responsible for Risk Assessments