Assessing risk and trustworthiness