Red, yellow, green risk assessment