Risk control hierarchy