This article discusses the abuse of IT security risk management, what it is, factors that contribute to it, and how it can be prevented.