Enforce risk-based testing