The nature, size and complexity of a business will dictate the level of sophistication of a risk assessment.
Nature, size and complexity factors include --