Risk is not a register
Most organizations manage a list of things that might go wrong. That list is not risk — and mistaking one for the other is why so many risk functions are busy without being useful.
- Enterprise Risk Management
- Governance & Oversight
