Risk assessments can serve as a vehicle for early buy-in, a method to secure budget and resources, a gauge for progress, a way to avoid fire-drills and set priorities for your program, a natural reporting-out format, and proof for regulators of the adequacy of your program.
FORBES: Risk Assessments: The Most Important Effort You're Doing All Wrong