RISK…and what to do about it