Why do we get so worried about being secure online? Are we worried enough? Do we worry too much? In this session we take a look at what information security risk is and how we can handle it rationally, avoiding the twin traps of paranoia and complacency.