Controlling Risk