Risk Management 2006: A Comprehensive Survey (Part II)

by Robert N. Charette

In 2002, Cutter Consortium conducted its first comprehensive survey of the state of risk management practice in the IT community. From all reports, the practice of risk management seems to have grown both generally and in formality over the past four years. The question this two-part series of Executive Reports addresses is, has it, and if so, by how much? Here in Part II, we continue our examination of the 2006 survey, focusing on risk management costs, its perceived effectiveness, organizational support, lessons learned, ROI, and enterprise risk management -- the latest entry into the risk realm. Overall, the 2006 survey finds that IT risk management practice has grown in maturity, if not in absolute numbers.