"Risk management" is an insurance term that, as such, knows no limits-- because any safety risk of which one is aware (in the business world) is one from which one is obligated to protect one's business and "customers"-- or suffer litigation for negligence. The standard there, I believe, is "reasonable care..." A bit nebulous....

Before we decry "risk management" in a vacuum, we have to look in parallel at our litigious society and perhaps ourselves as litigious individuals. :~)

~Susan