More money has been lost on the mismeasurement of risk than not having risk management at all. The battle is not won through being attuned to risk control. If your measurement of risk is completely wrong, it could be worse than having nothing in place.