Ignoring risks is not a viable risk management plan