Enterprise risk management strategies are lagging at around one-third of organizations, according to a risk study from AICPA, CIMA and North Carolina State University.
https://www.securitymagazine.com/articles/98413-one-third-of-organizations-lack-complete-enterprise-risk-management-plans
