Risk management professionals constantly preach that risk management is not compliance. Risk managers help set strategy.