Whose business is risk?