The May 2015 International Federation of Accountants (IFAC) paper "From Bolt-on to Built-in Managing Risk as an Integral Part of Managing an Organization" has neatly summarised the challenges of embedding risk management.