Risk management means taking a broader view of business risks and the approaches to resolving them than a basic mix of 'she'll be right' and a bit of insurance. Making a business more resilient does cost money, but can have other benefits too: and help manage threats from competitors as well as earthquakes, fires, and floods. This is worth a read - link.