What is risk and how, if it all, can it be measured?