This paper proposes a model for computer-based assessment systems that utilizes a step-wise approach to assessment design and implementation, within which the management and assessment of operational, technical, pedagogic, and financial risks are made explicit. The cyclic model has five components: planning, risk analysis and management, assessment design, evolutionary development, and evaluation. (DB)