Providing use of on-line non-downloadable software for surveying and assessment of risk management levels within an organization, and for cataloging risk management protocols