摘要：O objetivo deste artigo foi verificar como a gestão de riscos se materializa nas organizações. Para tanto, realizou-se pesquisa descritiva com abordagem quantitativa por meio de levantamento. O instrumento de coleta de dados compreendeu um questionário estruturado enviado à.
其他摘要：The purpose of this paper is to verify how risk management materializes in organizations. To do this, a descriptive research was conducted with a quantitative approach by means of a survey. The data collection instrument was a structured questionnaire sent to the Chief Risk Officers (CROs) of Brazilian companies, auditors and risk management consultants. A total of 22 responses were obtained. Data analysis reveals that –among those interviewed– there is little knowledge about work related to the risk management presented in the research; this indicates a scarce use of this work as training strategies for CROs. Concerning tools and risk management techniques, it was found that the techniques identified by COSO (2007) are rarely used by respondents, while the most used are those less complicated to implement. Among the reasons behind GRC adoption in a company, the most common reason was by request of regulatory bodies.
关键词：Gestión de riesgos; GRC; gestión de conocimiento; Chief Risk Officer; CRO.
