Is professional risk management really needed?