For those who seek to "solve" the problem of risk through the calculation of a single numerical value (as in the mean, median, mode, variance, standard deviation, alpha, beta, power, value at risk, etc), I commend this video by Dr Sam L Savage, author of The Flaw of Averages (2009, John Wiley):
To understand and evaluate risk, decision-makers must consider a multitude of fundamental, descriptive, and inferential measures and indicators in comcomitance. The potential for misspecification (as in model risk) and misinterpretation (as in naivety) are great. Thus, risk management (including analysis) should be viewed and treated as a polyvalent task that defies commoditization and delegation in enterprise.
Stack Overflow: A Code Laundering Platform?
13 minutes ago