Risks and mitigation measures in CBA