Risk records Homebuilt/outsourced analysis Expert judgement