Despite the focus on risk management organisations keep stumbling over risks that subsequent analysis shows were identified at the time, and which could have been prevented or mitigated.  Merlin Stone says it is often projects or products which might infringe risk appetite of an entity that are the most successful, and adhering to a formal risk appetite might otherwise prevent potentially successful opportunities being pursued.  He proposes an alternative approach.