Risk management is a very complex and comprehensive skill. It is not a soft skill. There are many types of risk, including compliance, security, operational and financial. Compliance is a key factor, because there can be few greater risks than falling afoul of government regulatory agencies.