1. An apparatus for controlling operational risk in a data processing system, comprising: a risk domain segmenter for segmenting said data processing system into a plurality of risk domains; a domain risk threshold selector for selecting a domain risk threshold for at least one of said plurality of risk domains; a system element monitor operable to query said data processing system for an indication of presence of system elements; a risk quantizer for evaluating a system element for element risk and for computing the potential contribution of said element risk to a domain risk total; a risk threshold comparator for comparing said domain risk total with said domain risk threshold; and a domain assignor operable to assign said system element to a risk domain in dependency upon an output of said risk threshold comparator.