risk distribution