Managing risk in an operating facility requires effective systems across the organisation AND performance management measures (such as an SMS audit)..