Data-Driven Risk Assessment