doing nothing risk