This paper evaluates a recent innovation in regulating risk called management-based regulation. Traditionally, risk regulation has either specified a particular means of achieving a risk-reduction goal or specified the goal and left the means of achieving that goal up to the regulated entity. In...