Category vulnerability And risk management