How do I assess my client’s attitude to risk?