Initial Risk Assessment for Users