Done well, risk management is not a bureaucratic function, it is an enabling function, and can be significantly lower cost than remediation after the fact. The NSW Risk Management Toolkit, if applied ...