I entered the field of risk analysis forty years ago from a background in physics followed by doctoral training and experience in decision analysis. I came into the Society for Risk Analysis (SRA) after participating as a committee member in the 1983 National Academies report, Risk Assessment in the Federal Government: Managing the Process. The insights and recommendations from this report, and successor reports from 1996 and 2008, merit revisiting on this 40th anniversary. Risk analysis includes risk assessment, a process of summarizing applicable science to inform decisions; and risk management, a process of making informed choices, usually involving multiple stakeholders. Inherent in both is the need to deal with complexity, uncertainty, and differing perspectives and goals. The lessons I have learned include the need for a conceptual separation of risk management from risk assessment, the benefit of an iterative dialogue between these activities, and the wisdom of articulating and assessing what we know, what we want, and what we can do as we seek to understand and manage risks affecting ourselves and those we advise.