Moving federal enterprise risk management beyond compliance theater

Moving federal enterprise risk management beyond compliance theater

This commentary is authored by Kshemendra Paul in his personal capacity. The views and opinions expressed are his and not those of the U.S. Government or any of its agencies Most agencies don’t use authoritative data in their enterprise risk and other management processes. They don’t monitor their risks, including if they are reducing risk or improving their understanding and management of risk from investments justified wholly or in part by pro…