Program implementation risk assessment