We can over complicate risk management so we lose what risk actually is, so let’s break it down and clarify what makes a risk, an issue, and an assumption