rework risk