During the past decade, interest grew on researching and applying maturity models to assess the process of risk
management in different fields. These models help organizations to understand the abilities that the organization has
on risk management and to contrast them with a reference framework. This framework is defined by best practices
in terms of maturity (Hillson, 1997; Jia et al, 2011).