Beta and SD are indeed the basic measurements of risks. Would you like to discuss how these measure help organization in not only measuring but also reducing the risks faced?
Do you agree that you can control only when you can measure? Does this apply to risks? Examples and experiences would be appreciated.