While the concept of risk management is not new, previous practice was more reactionary, primarily focusing on detection after the fact — root cause analysis, corrective actions, and preventing recurrence of the failure. Contemporary thinking places the emphasis on considering risks up front (prevention) and having a solid approach to address risk in planning, managing, and driving actions.