Risk management is a relatively young management technology. During the last ten years, it has evolved from a technical economic discipline with roots in insurance, finance and engineering into becoming a mantra which has permeated the regulatory and management domains. But why has risk management evolved to such a comprehensive discourse? The official rationale is quite simple – risk management contributes to organisational value creation. However, practice raises several paradoxes in relation to this explanation.