The key to risk management is knowing what can go wrong, if you don't have that knowledge and experience you will not select and implement the appropriate controls.