How to Conduct a Facility Risk Assessment