Assessing risks should be standard