diff --git a/checks/check_extra7164 b/checks/check_extra7164
index 0fe7ed33f2..3e64c0f978 100644
--- a/checks/check_extra7164
+++ b/checks/check_extra7164
@@ -28,7 +28,7 @@ CHECK_SEVERITY_extra7164="Medium"
 CHECK_ASFF_RESOURCE_TYPE_extra7164="Logs"
 CHECK_ALTERNATE_extra7164="extra7164"
 CHECK_SERVICENAME_extra7164="logs"
-CHECK_RISK_extra7164=""
+CHECK_RISK_extra7164="Using customer managed KMS to encrypt CloudWatch log group provide additional confidentiality and control over the log data"
 CHECK_REMEDITATION_extra7164="Associate KMS Key with Cloudwatch log group."
 CHECK_DOC_extra7164="https://docs.aws.amazon.com/cli/latest/reference/logs/associate-kms-key.html"
 CHECK_CAF_EPIC_extra7164="Data Protection"