critical records risk