Practical risk based approach to validation