Many organizations are interested in developing an enterprise risk management program for their environment but are unsure of where to start.
Identifying and organizing all previous findings is important because it enables an organization to understand what has been measured, the associated story for those findings, as well as a good indicator of the current state.
This step is absolutely critical in order to start the process of informing management about requesting funding.