Risk teams should recognise the explicit and implicit incentives that influence how frameworks are designed and how challenge is delivered, because only by making those pressures visible can they decide when standard approaches are useful and when they need to be adapted or temporarily abandoned.