We develop a model of risk assessment that incorporates assumptions from the behavioral theory of the firm into conventional expected utility models of compliance, and test the model using data on injuries and OSHA inspections for 6842 manufacturing plants between 1979 and 1985. Four hypotheses...