Comment by euroderf

But then you need upper management that appreciates the "risk potential" of every area, and what is required to keep that risk at bay.