Since the mid-1990s risk management has undergone a dramatic expansion in its reach and significance, being transformed from an aspect of management control to become a benchmark of good governance for banks, hospitals, schools, charities and many other organizations. Numerous standards for risk management practice have been produced by a variety of transnational organizations. While these many designs and blueprints are accompanied by ideals of enterprise, value production, and
good governance, it is argued that the rise of risk management has also coincided with an intensification of auditing and control processes. The legalization and bureacratization of organizational life has increased because risk management has created new demands for proof and evidence of action. In turn, these demands have generated new risks to reputation.