Few audit committee members are confident that their company’s current enterprise risk management processes capture “disruptive risks."
Robust program in place, but processes may not capture disruptive risks
Robust program in place, including processes to capture disruptive risks
Program implemented, but requires substantial work