M&A risk assessment