CSP risks