Establishing and maintaining a strong risk management posture is often touted as the best stance an organization can take to meet IT security objectives, ultimately helping companies protect critical assets and applications. But exactly what this entails varies from organization to organization.