The article explores how Jordanian insurance companies manage risks and the challenges they face. The researchers looked at four key areas: governance and strategy, risk culture, operations, and technology support. They found that only 28% of companies have a plan for IT risk management, and 33% follow standard risk management practices. Additionally, 37% have faced electronic attacks, and 49% are investing in training for risk management personnel. Overall, the level of risk management operations and governance in these companies is around 60-64%.