Risk management is much wider than simple financial or operational risk. Concepts such as ‘strategic risk management’, ‘integrated risk management’ and ‘enterprise risk management’ now describe the wider application of such thinking, tools and techniques.

There is a common view that strategic risk is about managing risk ‘strategically’ rather than examining strategic risk as a category similar to operational, financial and other risk areas. This common view causes confusion and may be one of the reasons that strategic risk is not further researched or specifically managed.