Policy Statement and Risk Assessment