> Is it victim blaming to say someone was exercising poor risk management?
This is a delicate issue. The answer to your question has to be: No, not per se...
However there are some other things to keep in mind:
() If one suggests that the victim's poor risk management absolves the perpetrator of responsibility in the slightest degree, then one is definitely blaming the victim.
() Sometimes that subtext -- that the perpetrator is not fully responsible -- is present but not stated explicitly. So I think people are often right to be aware of the possibility that that's underneath what is being said.
() On the other hand, sometimes that subtext is absolutely not intended, but is heard anyway. A lot of people have trouble with the notion that two parties to an interaction are both 100% responsible for their own choices. And someone recently victimized may not be emotionally ready to look at how they allowed it to happen. So one must be careful here; but sometimes, if one wants to get the point across, it's necessary to emphasize that the perpetrator is still totally responsible for their own actions.
So in your example, if you were to suggest that Bob's fine should be reduced because Alice could have prevented the accident, that would be victim blaming. But if you're only saying that Alice could learn from this (to be more alert, to try to stay out of other people's blind spots, and to watch out for nearby drivers using cell phones) then that isn't victim blaming.