"With respect to risk management efforts, the data, query, analysis, reporting and communication elements are especially useful for organizations that seek to quantify, plan and review their risks." . . . . . . .