The focus of the risk function has expanded far beyond its quantitative roots, but other aspects have changed little, according to Roger Dix