The article first and foremost applies to large commercial listed companies and organizations. It should go without saying that a large part of the content is also applicable to non-listed or smaller organizations, governments, and even individuals. We begin the article with a paragraph on recent technological change, the speed of developments and the impact. We will then discuss current risk management, its nature and goal, the role of legislation, risk management in practice and the effect of certain aspects of human nature. This will make it clear that the way risk management has been dealing with technological change has most often consisted of 'responding' after the fact, as opposed to anticipating. To make it clear why that will not be enough to thrive and survive in the near future, we then do a deep(er) dive on tech developments and their exponential nature, with a focus on what is coming. We end with conclusions and recommendations.