How to Evaluate a Company’s Risk Profile