Risk management is no longer the preserve of publicly traded concerns and safeguarding interests means taking a hard look at the programmes on offer