risk percentage capped at 100