Two Challenges In Making Risk Management Decisions