https://rud.is/b/2012/05/08/is-your-organization-ready-for-a-risk-management-program/
Is Your Organization Ready For a Risk Management Program?