The difference between volatility and risk