Managing infection risks is a core activity for infection control professionals, yet there is a relative paucity of literature on infection control risk management. The purpose of this review is to draw attention to some areas that require further clarification and research. These include risk management objectives, clarity about which risks are taken account of, agreed terminology both for experts and non-experts, and research on the importance of risk compensation in hospital-acquired infection control.