controlled risk