Which practice has a purpose that includes ensuring that risks have been properly assessed?