Question 1. Given then that we each have our own risk tendencies (some people love taking risks, while others avoid it like the plague), how can we determine a risk profile for our project, since each of our organizations has its own tendency to deal with risk?
Question 2. What is an acceptable risk and how would you determine this?