Risk and Impact are relatve and Cost is only one part of Impact. The business can easily convince itself that they have considered objectively what costs will be incurred while looking only at production costs, rather than at costs to repair/fix and get everything going again.
Biting the hand that feeds IT
