”It's not about eliminating risk, it's about managing it”