https://riskacademy.blog/are-risk-reports-useful/