changing risk assessment to impact assess, fixes #134

Signed-off-by: Werner Macho <werner.macho@gmail.com>