Kathy Sierra has a good post on risk aversion. Worth reading for security professionals. (He says, in his dispassionate, risk averse voice, as he waits to die).