Boosting risk-based approaches to assurance