From the above report;
“The risk management system offers to handle risk as an objective value and to provide a structure for handling risk. However, there is no aid or control of what is put into the system . . .The numeric risk value is based solely on how imaginative the involved persons are,” DMAIB wrote. “The assessment of the risk reduction is highly sensitive to one or more individuals’ subjective risk perception, which will be strongly influenced by the desire to make the operation possible. Thereby, the risk management system will rarely limit activities prone to risk. In fact, the risk management system instead tends to facilitate the carrying out of risk prone operations.”
It’s all about how imaginative one is when assessing risks and how imaginative the client is when your assessing risks.