An organization can have seemingly everything covered, and still miss the whole risk picture

"Based on these leading practices ... they should consolidate these programs and focus on all types of information, leverage expertise," said Joe Hackett