premise: A risk assessment is the process of identifying potential risks in a system under development and then determining the significance of each risk in terms of its likelihood and impact on the acquisition's cost, schedule, and ability
hypothesis: The risk assessment finds potential risks in a system that's being developed.