Federal programs risk assessment