Assessing Risk? Start with Industry Data