How to automate risk-based screening