What does it take to do a complete risk assessment for your financial institution?