Risks vs Requirements