How to assess risk?