Moreover, the absence of a risk management program can also lead to poor decision-making. Without a clear understanding of the risks involved, decision-makers may make choices that expose the organization to unnecessary risks. This could lead to poor performance and, in the worst-case scenario, the failure of the organization