risk rating 2.0