Companies need to constantly make decisions about risk. They need to decide if a certain risk level is low enough or if some measures for its reduction are still needed. In this regard, risk assessment appears as a basis ...