Managing risk is no longer about buying protection—it's about deciding, deliberately and transparently, how your organization deploys capital in the face of uncertainty.