> “you manage risk, but risk cannot be managed.” Ie. there is no terminal state where it’s been “solved.” I often hear people misinterpret "risk management" as

> “you manage risk, but risk cannot be managed.” Ie. there is no terminal state where it’s been “solved.” I often hear people misinterpret "risk management" as if it means "risk minimisation", but this is the first time I hear of "risk elimination"! Risk management is about finding an appropriate level of risk. Could be lower, could be higher.