Risk records self-made / purchased analysis