A risk must be attached to an asset, and the inventory is empty. Add an asset first, then log risks against it.