I for one have never "seen" a risk assessment in my life, in fact I didn't know they were physical entities that coukd be seen. I thought a risk asessment was a bull**** phrase for bureaucrats just to say "no".
I deal with risk assessments as part of my job. Every listed company has to go through detailed risk assessment and contingency planning on every risk, its disruption time period and the potential financial loss for each and every department and business process. This all has to be approved by the auditors and it has to fit in the legal framework of the host country. Its a legal requirement and it applies to every company from car manufacturers, banks, energy generators to soft drink makers - everything (including and especially the military).
You probably have never seen a risk assessment/continuity plan becuase you are at too a low level - CEO and board members have to sign off on it and its their neck on the line when it comes down to it (and confidential).