Many financial institutions have rushed to adopt new risk management systems, pressured by economic realities and regulations that include Basel II, Sarbanes-Oxley, new corporate governance and accounting standards, and internal requirements. IT managers believe they have the data needed to drive these systems – for example, transactional data generated by day-to-day business activities and held in operational databases. They also believe that there is a software package for every type of risk. But they have found it is quite another matter to get real insight into the institution's overall risk position.