Risk assessment is the analysis of risk and it is necessary for risk management that should result in making decision whether

there is going to be an attack or not.

to accept, eliminate, mitigate or avert risk.

there are any vulnerabilities in your systems or not.

there are exploits available for the vulnerabilities in your systems.