Managing record keeping risk