Risk teams should examine not only whether a risk framework is complete, but how it was constructed. A sociological lens can reveal hidden assumptions, challenge inherited categories and expose gaps between the risks an organisation faces and the risks it is prepared to recognise. They need to ask “Why have we chosen to define risks this way, and what does that choice prevent us from seeing?”