Business risk management is now a recurring topic in boardrooms, audits and strategic meetings, but it is also one of the least understood issues in organisations.  In practice, many companies only start talking about risk when an audit, regulatory requirement or customer demand arises. In…