Myths help us to make sense of the uncertainty that surrounds us. In the world of business and projects, risk management performs the same role. Unfortunately, there are also myths about risk management. These are often partly true, but they do not represent reality.

Here are the top 10 risk myths, and how to counter them.

Myth 1: All risk is bad. "Risks are potential problems, and if they happen, then we are in trouble." Risk includes both threats and opportunities, and both need to be managed proactively. Opportunities can save time or money, enhance performance and help us to achieve objectives.

Myth 2: Risk management is a waste of time. "Most risks are outside our control, and it is impossible to address them in advance." Instead, we will deal with any issues that arise. If we deal with risk effectively, then we will not have so many issues to tackle.

Myth 3: What we do not know will not hurt us. "Maybe we will be lucky and risks will not affect us. Ignorance is bliss!" Risks can hurt us, our business or our projects. Avoidable problems will happen, and benefits that could have been captured will be missed. Not knowing about risk can be costly.

Myth 4: The Risk Manager manages risk. "We don't need to manage risk — we have a risk manager." Every member of the team should be a "risk manager," tackling risks that affect their area of responsibility. The risk manager should facilitate the risk process to ensure that it is effective.

Myth 5: All risk can and should be avoided. "We will do whatever it takes to ensure risk cannot happen, no matter what cost or effort is involved." Not all threats can be avoided, and sometimes avoidance is too expensive or takes too long, so another strategy is required, such as transfer, reduction or acceptance.

Myth 6: Our business and projects are not risky. "Absence of risk is a sign of success. Where risk appears, it needs to be removed as quickly as possible." Risk is built into all business and projects, linked to reward, as we take risk to create value.

Myth 7: Risk management requires numbers. "Only quantitative risk analysis can reveal the true level of risk exposure." Quantitative risk analysis is powerful, but it is often not cost effective. Many risks cannot be easily quantified either, so a qualitative approach is always needed.

Myth 8: Risks are covered by existing processes. "We have processes to deal with all our routine risks, so we do not need to do risk management." What about risks that we have never experienced? The risk process should identify novel risks, assess their importance and develop targeted responses.

Myth 9: Contingency is for weak people. "A strong manager meets all targets and does not need extra time or money for things that might never happen." No one can foresee the future, and including a risk budget for known risks and contingency for unforeseen risks is a sign of wisdom not weakness.

Myth 10: Risk management does not work. "The risks we identified never happened, and our responses made no difference, so we gave up." Perhaps we missed the real risks, had ineffective responses or failed to implement agreed actions. Done properly, risk management always works.

Tackling these 10 risk myths and implementing the proposed solutions will ensure that your risk management is grounded in reality, giving you the best chance of success.