How to Undertake an Effective Risk Assessment