Case study: I was recently asked to advise a medium sized organisation on how to set up an agile risk management process. Although many of the risks were known intuitively, there was no formal list of risks and no analysis of possible mitigations or controls around these risks. The result was a focus on [...]