risk logic