A periodic risk assessment is an essential component to implementing and maintaining an effective internal control system. Department heads and/or upper management can utilize this template to assess risks within their area of responsibility to help the municipality achieve its objectives.