program risks