documentation risk