At the onset of COVID-19, almost 40% of businesses had failed to regularly test their risk and crisis plans, an Australia-wide survey of almost 400 governance and risk professionals and senior executives found, leaving them exposed to major risks.