The only alternative to risk management is crisis management --- and crisis management is much more expensive, time consuming and embarrassing.