One theme woven into countless articles on my blog over the years has been that, in spite of what different standards and best practices lead you to believe, risk assessments and other enterprise risk management (ERM) practices must be specially designed to the organization’s needs, culture, and skill sets to be effective. (Many use the […]
