Policy-makers today need to choose between the risk-based or hazard-based route to policy management.