Furthermore, traditional risk management approaches often fail to develop a common way of thinking about “risks,” leaving the interpretation of what constitutes a risk and what level of risk is acceptable to each silo leader. And for some, risk management is left to ad hoc, gut-level knowledge and management of key categories of known risks.