legacy risks