Before doing the Risk assessment, one of the pre-requisite is the Requirements or the reference document
Must be baselined
Atleast near to baseline
draft copy is sufficient
does not need to be available