Boards of directors tend to have an aversion to risk management, says Ken Rushton, but it’s crucial they face up to their responsibilities.