risk-based classification