Although post-Caremark opinions and commentary have focused on law compliance programs, risk management programs do not differ in kind from the types of conduct that traditionally have been at issue inCaremark-type litigation.Risk management failures do differ in degree from law violations or accounting irregularities.