The evaluation and management of risk throughout the product life cycle is the single most important concept in the regulation of medical devices. Yet it is difficult to define precisely what “risk” means or how to assess it in an industry where some 115,000 devices are produced by thousands of manufacturers, employing a dizzying array of technologies destined for use in varying health settings for every imaginable indication. So who determines the risk, and where do problems typically arise?