Through a series of questions, the tool assesses the internal and external risks associated with the location and nature of an operation and the internal controls in place to manage the identified risks.