Existing risk management methods have a tendency to be focussed on the threats (rather than the opportunities) and the technology risk (rather than the organisational features of the problem). Also, they are better developed for quanti-tative variables and where mathematically precise problem-representation exists than qualitative variables and where knowledge of…