In this context, founders must decide when and how to invest in risk management infrastructure. Every dollar earmarked for controls comes at the expense of a dollar that could be devoted to what is more commonly thought of as revenue-generating activity.