Technology and enterprise risks are still primarily managed through spreadsheets at many organizations.