QA risk management