INTRODUCTIONRISK POLICY AND A CENTER OF EXCELLENCE FOR RISK MANAGEMENTTHE CONSEQUENCE DOMAINRISK-BASED BUSINESS PROCESSES AND ORGANIZATIONAL CONSIDERATIONSCONCEPTS, METHODS, AND MODELS ENABLING RISK IDENTIFICATION, EVALUATION, MITIGATION, PRIORITIZATION, AND MANAGEMENTINFORMATION REQUIREMENTS AND CHALLENGESMEASURES OF EFFECTIVENESS FOR CONTINUOUS IMPROVEMENTCONCLUSIONNOTESABOUT THE AUTHOR