identified risk exposure