National risk assessment principles