Many organisations use maturity models to benchmark current capability and to set improvement targets. We can do the same with risk management capability, understanding our level of maturity and working to strengthen it. But what is risk management maturity? David explains.