
T1 ASSESSING THE
RISK MANAGEMENT
MATURITY OF THE
ORGANISATION
Businesses generally find it difficult to execute processes consistently
across the enterprise. Even when they achieve this, how do they know
that they are doing a good job relative to their competitors? This was
the question that was addressed by the Software Engineering Institute in
the late 1980s. By implication, the initial work was focused on improving
the quality of software development and this resulted in the capability
maturity model (CMM). This was developed and expanded over time
into capability maturity model integration (CMMI) and broadened to
cover general