A method for improving a quality of a machine-learning based model, the method comprising, performing by one or more processors, operations including: generating, by a risk assessment system, a first query requesting a description of a change proposed to an IT system and an intended outcome of the change proposed; receiving, by a risk assessment system, a first response from a change owner to the first query; generating, by a risk assessment system, based on the first response, a second query providing a risk of an incident associated with the change proposed and requesting justification of the change proposed in view of the risk, wherein the second query is different from the first query; receiving, by a risk assessment system, a second response from the change owner to the second query, wherein the second response is different from the first response; generating, by a risk assessment system, based on the second response, a third query requesting an implementation plan for the change proposed, wherein the third query is different from the first query and the second query; receiving, by a risk assessment system, a third response from the change owner to the third query, wherein the third response is different from the first response and the second response; generating, by a risk assessment system, based on the first, second, and third responses, an alert to an incident owner providing the description, intended outcome, risk, justification, and implementation plan of the change proposed, wherein the alert is different from the first query, the second query, and the third query, and wherein the incident owner is different from the change owner; receiving, by a risk assessment system, based on the alert, a risk confirmation or rejection from the incident owner confirming or rejecting a relationship between the change proposed and the risk, wherein the risk confirmation or rejection is different from the first response, the second response, and the third response; updating, by a risk assessment system, based on the risk confirmation or rejection, the machine-learning based model to learn an association between extracted features of the change and extracted features of the incident; receiving a reported incident in the IT system; classifying the reported incident; predicting, by the machine-learning based model, a cause of the classified incident based on the learned association between extracted features of the change and extracted features of the incident; and providing the reported incident and the predicted cause to the incident owner and the change owner. generating, by a risk assessment system, a first query requesting a description of a change proposed to an IT system and an intended outcome of the change proposed; receiving, by a risk assessment system, a first response from a change owner to the first query; generating, by a risk assessment system, based on the first response, a second query providing a risk of an incident associated with the change proposed and requesting justification of the change proposed in view of the risk, wherein the second query is different from the first query; receiving, by a risk assessment system, a second response from the change owner to the second query, wherein the second response is different from the first response; generating, by a risk assessment system, based on the second response, a third query requesting an implementation plan for the change proposed, wherein the third query is different from the first query and the second query; receiving, by a risk assessment system, a third response from the change owner to the third query, wherein the third response is different from the first response and the second response; generating, by a risk assessment system, based on the first, second, and third responses, an alert to an incident owner providing the description, intended outcome, risk, justification, and implementation plan of the change proposed, wherein the alert is different from the first query, the second query, and the third query, and wherein the incident owner is different from the change owner; receiving, by a risk assessment system, based on the alert, a risk confirmation or rejection from the incident owner confirming or rejecting a relationship between the change proposed and the risk, wherein the risk confirmation or rejection is different from the first response, the second response, and the third response; updating, by a risk assessment system, based on the risk confirmation or rejection, the machine-learning based model to learn an association between extracted features of the change and extracted features of the incident; receiving a reported incident in the IT system; classifying the reported incident; predicting, by the machine-learning based model, a cause of the classified incident based on the learned association between extracted features of the change and extracted features of the incident; and providing the reported incident and the predicted cause to the incident owner and the change owner.