Norman Marks: I like a lot of what they say, for example:

The taking of risk is a natural part of running any enterprise, but it is often not explicitly stated in the formulation of business decisions. The expression «risk» has often been exclusively associated with unwanted events, and risk management has been defined as analyzing and restricting the probability and impact of unwanted events. This is only one dimension of the total picture. Evaluating positive outcomes is just as important an element of ERM as evaluating the downside as ERM is concerned with the whole picture enterprisewide and evaluating risk strategy in relation to a portfolio of risks.

Read the full blog from Norman Marks here.