Can issues be prioritized by risk level