Cobit Assess & Manage IT risks

% of IT budget spent on risk management

Frequency of review of the IT risk management process