risk management without losing money