single gateway risk