Risk managers have the responsibility of selling the value added by risk management to the organization and its stakeholders, but this is not an easy task.

How do risk managers sell the value they are generating when that value may only be realized when unforeseen events occur, or if the new control systems are successful, when the risk never occurs?