The cost of assessing risk is now often greater than the cost of failing.