Undersøgelse fra PWC i USA kortlægger i analyse, hvor virksomheders risikoovervågning ofte kikser, og kommer med gode råd til, hvor der kan sætte ind: “The usual suspects 1 Lack of alignment with strategy and business activities. 2 Inadequate planning and communication. 3 Misconception of time commitment required of business and functional participants. 4 A focus on current or past risks rather than the future. 5 Generic rather than company tailored risk inventory structure and negative risk definitions. 6 Mismatch between assessment complexity and risk complexity. 7 Lack of defined perspective and duration which leads to inconsistent assessment responses. 8 Failure to validate identified key risks with executive management (“C” Suite). 9 Ineffective or non- existent risk prioritization criteria and methods.”
