US English
Risk Assessment is determining what risks could happen, how likely they are to happen and what the consequences of them are.
Research some risk assessment best practices and/or templates. How would you apply them to a medium/large network?