“Risk management does not mean minimizing risks; it means choosing which risks to take, with open eyes and in a deliberate, analytical fashion. The list of things you do is important, but the list of things you decide not to do is sometimes even more important.”