As regards the involvement of senior management: lack of cooperation, of transparency, lack of qualification and independence in decision making;
o In terms of formulating policies and procedures: the possibility of formulating policies and internal rules inconclusive and inconsistent with the targeted risk, achieving a much less developed infrastructure, rigid implementation and lack
of communication;
o In terms of creating a division to deal with risk management: an inappropriate structure, inexperienced employees, and not least the lack of independence;
o In terms of achieving an integrated risk management, threats are: the inability to control the system, IT system and database and lack of appropriate tools.