Fourteen did not. Five did. Many of them went further than just identifying the risks and actually developed tools and processes and did scientific studies. They raised ports. I mean, there was action spent to adapt by those five departments. What's more disconcerting is that 14 did not do that good risk assessment.
On October 31st, 2017. See this statement in context.