Risk assessment is one of the main activities of risk management processes and an important task in any software development project (e.g., see [Boehm 1989]). Risk-based testing is about prioritizing tests based on product risks and therefore rests upon risk assessment. Based on this assessment, a test plan is derived, in which test cases are ordered in such a way as to exhibit failures that lead to the highest risks as early as possible. In this presentation, we first sketch an industrial usage scenario for risk-based testing. Then, we dis-cuss the benefits and drawbacks of existing approaches for realizing the risk assessment needed for risk-based testing. Finally, we introduce a technique for risk assessment that is based on require-ments metrics and discuss how this improves risk-based testing.