What is the purpose of conducting periodic risk assessment in insurance operations