Why so many companies didn't have risk management in place when COVID hit