Overly complicated processes

Risk procedures are so complicated that no one fully understands them. Most of the time, people just avoid taking any action at all.