At the risk of defining my way out of a potential problem, I would agree with the importance of risk management...and any process must itself incorporate risk management in at least two ways: (1) During process definition, we must analyze the cost, schedule, and technical risk of alternative processes, so we can make a rational, balanced choice of process; (2) The process must include risk management activities to be performed during projects.

Put more briefly: a "good" process provides a predictably "good" outcome. That's why an "off-the-shelf" process so seldom works-- "good" almost always depends on the business context (products, markets, customers) in which the process operates.