Risk policies must flex if corporates are to take account of external influences, such as currency moves, or Internal ones, such as acquisitions.