Those lists of greatest risks all miss the BIG one
When something goes wrong, 99.999999% of the time it’s because somebody made a poor decision (at least in hindsight). The risks associated with a poor decision could have major ramifications.
risks
Don’t forget to audit controls!
It's best to have management detect issues and for audit to assess whether those detective controls are adequate.
One objective but multiple risks
Some organizations and consultants are wedded to the idea that the level of risk can be quantified and calculated as the magnitude of a potential effect (or consequence) multiplied by its likelihood.
