A financial service firm adheres to heavily regulated compliance legislation.

An organization that uses an integrated, risk-based approach supported by executive management and documents this in a risk management plan demonstrates a high level of risk maturity. This aligns with best practice models such as the PMI’s Organizational Project Management Maturity Model (OPM3) and ISO 31000:

"High maturity organizations have risk management integrated with governance and strategic decision-making, with executive-level endorsement and formal documentation."

— ISO 31000:2018, Section 5.2

"At the highest maturity, risk management is part of the culture and is proactively used to achieve objectives."

— OPM3, PMI