Where to stash your organizational risk?