A survey can tell you something important.

But the score doesn't explain the work.

A useful risk assessment needs to understand where exposure occurs, what creates it, who experiences it and what can be changed.