Risk management is a topic on the agenda of an increasing number of organizations around the world for the last 20 years or so. In fact, due to the large number of corporate scandals, risk management has become central in the boardrooms of large enterprises around the world as some stock exchanges in fact demand risk management in the corporate governance work. Despite this, we have a financial crisis that abundantly illustrated that risks were not properly understood – also in corporations that supposedly were conducting risk management