Total cost of ownership, Make risk determination based upon known metrics, Risk Management