Recognizing that the greatest risk to the enterprise may come from outside the organization, a recent Deloitte poll revealed 70 percent of respondents indicated a moderate to high level of dependency on external entities that might include third, fourth or fifth parties. Also, nearly half (47 percent) of respondents said their organizations had experienced some sort of risk incident involving the use of external entities in the last three years. https://deloi.tt/2CiYnGK

1. Reestablishing the perimeter: Extending
the risk management ecosystem
Deloitte poll results from October 2018

2. 2019 Extending the risk management ecosystem poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 2
Methodology
Professionals participated in a Deloitte Dbriefs
webcast, titled “Reestablishing the perimeter:
Extending the risk management ecosystem,”
on October 25, 2018. Answer rates differed
by question.
4,057
2

3. 2019 Extending the risk management ecosystem poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 3
What is your organization's level of dependence on
external entities that might include third, fourth or fifth
parties?
Votes Received: 3,129
High level of
dependence
19%
Moderate level
of dependence
52%
Little or no
level of
dependence
18%
Don't
know/Not
applicable
11%

4. 2019 Extending the risk management ecosystem poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 4
Has your organization experienced any risk incidents
involving the use of external entities (third, fourth, fifth
parties) in the last three years?
Votes Received: 2,909
11%
36%
26%
27%
0
0.05
0.1
0.15
0.2
0.25
0.3
0.35
0.4
Yes, we experienced a
high-impact risk
incident
Yes, we experienced a
low-impact risk
incident
No, we did not
experience any risk
incidents
Don't know/Not
applicable

5. 2019 Extending the risk management ecosystem poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 5
Which of the following risks in the extended enterprise is
your organization most focused on in the next 12 months?
Votes Received: 2,935
Strategic (geo-political,
climate and environment,
etc.), 10.0%
Viral event (social
media), 5.0%
Cyber and
technology, 38%
Legal, financial
and regulatory,
20.0%
Operational
(supply chain),
11.0%

6. 2019 Extending the risk management ecosystem poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 6
Who oversees risk governance of your organization’s
extended enterprise?
Votes Received: 2,708

7. 2019 Extending the risk management ecosystem poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 7
Which of the following emerging technology areas is your
organization most likely to invest in over the next 12
months?
Votes Received: 2,314
31%
18%
12%
7%
7%
6%
19%
Cloud computing
Robotic process automation
Data visualization
Cognitive technologies
Blockchain
Internet of things
Don't know/Not applicable

8. 2019 Extending the risk management ecosystem poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 8
Media contact
Nicole Hockin
Public Relations
Deloitte & Touche LLP
nhockin@deloitte.com
Full press release available on
Deloitte.com
8

9. The statements in this report reflect the aggregation of poll responses and are not intended to reflect facts or opinions
of any entities. All data, charts and statistics referenced and presented, as well as the representations made and
opinions expressed, unless specifically described otherwise, pertain only to the participants and their responses to the
Deloitte poll. The information obtained during the poll was taken “as is” and was not validated or confirmed by Deloitte.
This presentation contains general information only and Deloitte is not, by means of this presentation, rendering
accounting, business, financial, investment, legal, tax, or other professional advice or services. This presentation is not
a substitute for such professional advice or services, nor should it be used as a basis for any decision or action that may
affect your business. Before making any decision or taking any action that may affect your business, you should consult
a qualified professional advisor.
Deloitte shall not be responsible for any loss sustained by any person who relies on this presentation.
About Deloitte
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee (“DTTL”), its network of member firms,
and their related entities. DTTL and each of its member firms are legally separate and independent entities. DTTL (also referred to as “Deloitte Global”)
does not provide services to clients. In the United States, Deloitte refers to one or more of the US member firms of DTTL, their related entities that operate
using the “Deloitte” name in the United States and their respective affiliates. Certain services may not be available to attest clients under the rules and
regulations of public accounting. Please see www.deloitte.com/about to learn more about our global network of member firms.
Copyright © 2018 Deloitte Development LLC. All rights reserved.