A typical risk assessment process i s based on the combination of process criticality, probability of an adverse event and detectability of an adverse event. This allows the assignment of an overall level of risk to the process, using either a quantitative