Good risk management is never optional.