Systemic foundations of risk management

The paper argues that all significant risk management exercises must be based on a systems framework. It discusses the underlying ideas of such a framework, and presents value criteria for assessing the quality of a system. The ideas are illustrated by three examples: assessment of the safety of nuclear powered ships; risk management problems in a large IT project; and the introduction of uncertainty into project contract pricing.