Many organizations have resisted automating their risk management practices. It’s comfortable to maintain the status quo - often a combination of spreadsheets, emails and internal drives - to manage all facets of risk, including contractors. Unfortunately, there are several trade-offs.