Evaluating risk in implementing decisions