If you can stand up in a court of law and say confidently, that in your capacity as the director of your business, you have done everything reasonable that can be expected of you to protect your business, then you have done a good enough job at risk management.
What do you think?
Some people think of risk management as going to the nth degree to remove ALL risk. This is not possible, even if you spent all the money in the world.
Of course, there are those who deny the existence of any risk. "I have worked for 20 years in another company and nothing like this ever happened..."
