We think it would have been much better if the choice "Select type of risk assessment" was on a separate front page, with descriptions of what the various options mean (i.e. what does "organisational assessment", "problems", "values" and "IT system" actually mean.