Q83
Single choice
Which of the following is the BEST indication that an organization's risk management program has not reached the desired maturity level?