Managing risk is something all businesses and organisations have to do. It is rarely an optional nice-to-have. Yet in all the senior roles I have had, I continue to be surprised by how silo-driven many risk assessments are. Individual weaknesses and threats are identified and a series of mitigations are listed, but very rarely is a strategic approach taken. Yet the sheer connectedness and interdependence of systems means that the focus on an individual risk without recognising its collateral impact on others is likely to make those mitigations futile and insufficient. The risk landscape must be looked as a whole. To put it simply what is required is Strategic Risk Management.