Is innovation or regulation more important to address risk?