The need for risk management in government has grown along with agencies’ digital footprints. As complexity increases, so does vulnerability.