made many to many relationships between risks and assessments