Return attribution in a portfolio is common, but risk attribution is less well-known. It is important to know both sources of return and risk.