A source record can carry a Risk, so can the Nonconformance Category selected and then finally the Corrective Action itself can carry a Risk - all independently of each other. Because a Risk is associated with a Nonconformance (per the categories module) should we have a Risk option on the Corrective Action record at all? Or should the Advanced Risk option be moved to the source Nonconformance category. Likewise when generating a Corrective Action from the bottom of a cleaning record (for example), maybe the second column in that table should allow the user to select the Nonconformance instead of the Risk.
The reason for standardised Nonconformance is to avoid variation and individual interpretation of risk. So I think you should remove the risk selector from the CA record and display the inherited risk from the Nonconformance.