Risk initiatives require active cooperation among the business line heads who will ultimately benefit from risk done right, the IT department that implements it, and the key executives who identify the institution's risk appetites and policies. Best practice risk management cannot be implemented without the involvement of all three.