How to measure risk and reward