Common risk assessment framework and techniques