IT Risk

% of business projects that consider IT risk

Change in "Residual Risk"

Number of IT-related events with business impact with failure to escalate