For me, it's not always about risk with these decisions. We use Stored Procedures almost exclusively and I like the fact that we have a pretty thorough documentation of our company's business logic all in one place. The decision to go Stored Procedures, for me, is #1 Reusability, #2 Documentation and consolidation, and Security falls to #3