An interesting thing about risk management is that providing risk assessment results to business will often be seen as reactive and resistant behaviour by the business.