Risk mgmt: addition of known risks