In my experiences the difference between companies that have an effective risk control function and those that don’t is night and day. Businesses take risks, good businesses take measured risks. The same approach applies to the IT department.
A good risk controller needs to have the confidence of the business combined with complete respect from the [...]