business risk. "If risk can be measured, then you can analyze it, price

it, and trade it off, insure against it or mitigate it," he said.

Theory versus practice

But, as Richard Harris, VP & research director of Gartner points out:

"With regard to critical business operations, most organizations do not