The Truth about CPM Risk Models