Policy development and implementation is a dynamic process. Via generic administrative functions and according to specific normative processes it must ascertain that the policy, which must include the policy goals, is acceptable and manageable. Identifiable but not easily quantifiable risks emerge from these concepts, norms and administrative functions. A dominant risk factor is the capabilities of senior civil servants responsible for policy advise to the minister and policy implementation. It is suggested that the analytical hierarchy process can be used to quantify risks in large systems.