Process or behaviour: which is the risk and which is to be managed?

Based on the belief that it is behaviour which constitutes risk rather than procedures, the paper focuses on the awareness of behavioural aspects in risk management techniques and the consequences that arise out of this awareness. It questions the traditional thinking that risk management is predominantly a set of procedures in the control of risk. The paper also considers the part played by public policy in managing risk and changing behaviour. The paper concludes that it is behaviour, and not the set of procedures, which is the risky factor; therefore in risk management there is need to focus on developing human behaviour that is capable of being flexible in an event.