Risk as a design condition

Treating risk not as a documentary warning but as an architectural requirement. If the risk is fraud, the process incorporates verification or segregation of duties; if it is missed deadlines, it incorporates monitoring and escalation.

The difference from the usual risk matrix is where the analysis ends. The matrix produces a document; this practice produces a control inside the process, and the process does not advance if the control was not executed.