Many private companies have not implemented risk management practices that can help protect them from exposure to lawsuits and government fines, a survey by the Chubb Group of Insurance Companies has found.