“Risk is changing, and the business environment is changing”