A risk assessment is the process of identifying potential risks in a system under development and then determining the significance of each risk in terms of its likelihood and impact on the acquisition's cost, schedule, and ability
The risk assessment finds potential risks in a system that's being developed.