Category risk assessment