The connection between risk management and business assessment