In a world of risk, is it reasonable to self-host? Can risk management methods from large companies help me better anticipate and control risks on my personal information system?