Implementing risk management in construction projects and organizations may bring a number of benefits and therefore it is necessary to have risk management as an integral part of a construction organization’s management practice. The aim of this paper is to develop a risk management maturity assessment model for construction organizations. The paper describes the development process of a Web-based RM3 (risk management maturity model), including its contents, its validation and testing, as well as its applications. The RM3 developed has five attributes namely, management, risk culture, ability to identify risk, ability to analyze risk, and application of standardized risk management process/system. These attributes are measured against four levels: initial, repeated, managed, and optimized. It is found that the proposed RM3 was suitable and useful. Using the RM3, it is found that the Australian construction industry’s overall risk management maturity level was relatively low (where 32% rated at Level 2 an...