Explain the importance of a risk assessment in determining which assets in an organization require protection and the extent to which these assets are vulnerable. Discuss the role of risk assessment in disaster recovery planning and business continuity planning.