Reducing the risk of something to a level that is 'as low as reasonably practicable' sounds noble, but in practice often sets up this neverending quest to be able to 'defend' whatever it is you are designing or operating. Which often means that we overlook areas of risk that could get in the way of progress. So what is the answer?