Motivation and risk-based endpoint protection