“The second thing we did was said, OK, we've now identified the risk, but what do you want to do with the money? Because it's not enough to have risk; you've got to have a meaningful use for the money we give you.”