New Rules for Risk Management