Comment by knightofmars

Absolutely, this is a often ignored or missed aspect of building systems. Quantifying risk in a fashion that all parties have the same understanding of said risk can be very difficult. There has to be a common language and agreed upon thresholds of risk. After developing shared understanding of risk, it's much easier to highlight and change the behaviors of individuals and the teams.