What does risk and risk management mean to you? Are there different definitions for risk? If so, what are they? How would organizations benefit from having a formal risk management program (especially for IT and auditing)? Describe how an organization you've worked for or observed handles risk. Do they use a formal risk management process or tool? Or is it more a