Moreover, companies need to examine not only the risk to a strategy they're considering, but the risks of the strategy itself, according to the study. Board leadership that's engaged in risk oversight can provide an objective view of both types of risk.
While the study provides a number of benchmarks that companies can use to gain an idea of the actions their peers are taking, they won't find a one-size-fits-all risk management solution, Errity notes. "Every organization has to look at its structure and industry to see what will work."
Sign up for Computerworld eNewsletters.