It is the responsibility of _____ __________ to initiate and support risk analysis and assessment by defining the scope and purpose of the endeavour?