As business problems become more complex, so do their associated risk. Organizations that once provided relatively simple services and products now engage in sophisticated financial transactions, increasing fragility and the potential for failure. Given the potential enormous losses organizations can face, it is hardly surprising that managers crave certainty, and one of the key ways they seek to achieve certainty is through the control of risk. Frequently, they look to achieve this through the application of standard processes, often supported by rigid structures of compliance.