Lock risk settings before session