SMS dit: Managing and measuring risk