Return on investment (ROI), Make risk determination based upon known metrics, Risk Management