Risk management is one of those areas which is assumed to be well established in most companies, yet many projects suffer significant cost overruns and delays, so it is worth asking the question why is the risk management process failing? We have also highlighted in this paper how some of the softer aspects / risk culture is as important as some of the harder aspects, such as processes, methodologies, etc. In some of our recent client engagements we have helped clients understand their risk exposure at a project portfolio level and take the right decisions for the organization as a whole.