Staff who don’t understand the fundamental importance of risk controls should find another industry to work in, he says.