athenahealth Interview Question

How would you conduct a risk assessment?