Risk management is a formal process owned by senior executives responsible for keeping everyone safe and sound day and night. They report to internal and external audit committees or, actually, prefer to avoid any and all interaction with audit folks since even a casual discussion with auditors can result in a boatload of work for entire teams of already overworked professionals.
