The risk assessment documents your risk analysis based on ISO 14971 which identifies the foreseeable risks that will be encountered by users while they use your device. The risk assessment contains your software risk classification, your risk analysis (a preliminary hazard analysis) and risk controls that should be implemented based on unacceptable risks.