From Risk Tolerance to the IPS