Risk management is not avoiding risks but understanding and mitigating them.