how investors should think about risk management