Three years have passed since the financial crisis of 2008 put risk management at the top of just about every corporate board's agenda, and still it continues to confound many directors.

In fact, a new survey finds that many board members admit they don't spend enough time on risk, and many companies still don't have a chief risk officer or a dedicated board committee to oversee risk.

According to a study by the corporate governance practice of BDO USA, 55 percent of board members said they would like to spend more time on risk management. The topic ranked first among areas ...