ABSTRACT
In practice, the risk responses perspective has been found to be responsible for as many low Risk Maturity Model (RMM) scores as all the other five perspectives put together. Projects often seem to have real difficulty in making sure that planned responses are actually implemented. Whilst it might be relatively easy for a risk specialist to facilitate effective risk identification and analysis, the implementation of risk responses is usually outside their direct control. A corporate risk manager, speaking at a conference, once summarised the problem like this:
In the past, my company has been very good at risk identification, risk assessment and risk filing.
