Duplicate risk assessment