assessments and of implemented risk management and reduction measures. Previous 
studies indicate that in many cases the risk assessment is conducted by an enterprise just to 
comply with legal obligations (paper compliance). A possible approach could be an anonymous 
evaluation of the quality of a representative share of risk assessments.