| Dimensions | Components | Items | Measurement scale |
| Risk Management Process | A) Identification | 1) Defining risk areas (5) | Ordinal |
| 2) Prioritizing risk areas (5) | Ordinal | ||
| 3) Time horizon exposure (3) | Nominal | ||
| B) Measurement | 4) Risk area targets (4) | Ordinal | |
| 5) Risk area exposure (3) | Ordinal | ||
| 6) Risk management software (4) | Ordinal | ||
| 7) Satisfaction software (4) | Ordinal | ||
| C) Treatment | 8) Risk management instructions (4) | Nominal | |
| 9) Risk attitude (3) | Ordinal | ||
| 10)Learning programs (4) | Ordinal | ||
| D) Evaluation | 11) Process evaluation (3) | Ordinal | |
| 12) Risk area policies (5) | Ordinal | ||
| 13) Reporting risk process (3) | Ordinal | ||
| 14) Reporting outcome process (5) | Ordinal | ||
| Organizational Structure | E) Responsibilities | 15) Reporting risk management (5) | Nominal |
| 16) Implementing risk management (5) | Nominal | ||
| 17) Executing risk management (5) | Nominal | ||
| 18) Evaluating risk management (5) | Nominal | ||
| F) Policies FRM | 19) FRM policies firm’s level (4) | Ordinal | |
| G) Sources FRM | 20) Sources used (4) | Ordinal | |
| H) Targets FRM | 21) FRM targets firm’s level (5) | Ordinal |