Boards at too many UK companies delegate responsibility for risk management rather than take direct ownership themselves. Paul Hopkin explains why a hands-on approach is compelling from both a business and a regulatory perspective.