Risk management
Risk management as a scientific methodology has been criticized as being shallow. Major IT risk management programmes for large organizations, such as mandated by the US Federal Information Security Management Act, have been criticized.