distribution of risk