The paper aims to understand if and which lessons have been learned since the financial crisis of 2007-2008, highlighting the main deficiencies which still affect the corporate governance and risk management systems more than a decade after. A survey was performed by collecting the answers to 15...