What information you use to calculate risk?