We have updated the Risks query to filter out deactivated records (i.e. added "WHERE (statecode = 0) --Active"); this approach means report consumer cannot reveal them.