In today's ever changing world, risk management alone is not sufficient. We need to build resilient systems and products. Misaligned incentives at senior levels often get in the way.