implementation risks