Category risk management