Risk assessment software should make real risk control easier: hazards, controls, reviews, approvals and evidence — not just produce prettier PDFs.