General Principles for Performing Aggregate Exposure and Risk Assessments