How would you evaluate the riskiness of a security?