Ability to implement own risk grading