Its all about risk, risk analysis, method, pros and cons, important factors and stake holders. Ignoring risk does not make the risk go way. So organizations and stake holders has to accept some certain degree of risk which we called it risk tolerance.