All sponsor companies need to perform a risk assessment of their software tools. We'd like to better understand what we have to gain by moving this work into the public sphere. How many full-time employee equivalent (FTE) are committed to risk assessment within your organization?
ideally numeric response, at 0.25 or less increments; if multiple choice, perhaps >10; >5; >3; >1; 1 or less
Does your organization use {riskmetric} for risk decision-making? If so, how?
No
Yes, we use the default summarized scores
Yes, we use the default metric scores, but apply custom logic
Yes, we use the assessment information to define a decision tree
Yes, we use the assessment information and make a decision on a case-by-case basis
All sponsor companies need to perform a risk assessment of their software tools. We'd like to better understand what we have to gain by moving this work into the public sphere. How many full-time employee equivalent (FTE) are committed to risk assessment within your organization?
Does your organization use {riskmetric} for risk decision-making? If so, how?