Risk-based thinking