Policymakers around the world, including in Europe, increasingly display a tendency to embed risk management into law, for example by mandating risk governance best practices or by requiring firms to have risk management functions in place. Most recently, the European Commission issued a...