back of a spreadsheet; back of the net

My first formal experience with risk management was through a Big American Firm, who bid on Big Federal Contracts. the assumption was that the government would sue you for every penny possible, and keep you to every promise you made. In return, you made sure you got every penny out of them that the contract would bear. It was a massively adversarial model, and I didn't enjoy cranking it much, but it does give me a good tool-set to use in the UK.