A discussion of risk lessons learned from the financial crisis. I argue that the public debate on risk management failures is mis-focused, and I propose an alternative paradigm for identifying the challenges to effective risk management and for directing future efforts to increase the effectiveness of risk management.