Aside from technical considerations of risk, it is important to recognize how risk is being transferred (or not, as the case may be) and the shift of technical risk to business risk. Often, enterprises are much more comfortable with business-related risk. Worth keeping in mind.