Risk governance

Principle

The approach to risk management is communicated throughout the organisation and supported by explicit ownership of the risks and a clear allocation of responsibility for their day to day management.

 Minimum standards

Defined approach
The organisation has a clearly defined policy or approach for risk management setting out its strategy and objectives and the approaches and processes the organisation adopts to achieve them.
View further guidance on defined approach

Clear understanding of capacity
The organisation has a clear understanding of its capacity and appetite to bear risk.
View further guidance on clear understanding of capacity

Risk issues addressed
Risk and risk management issues are addressed at an appropriate board, committee or equivalent.
View further guidance on risk issues addressed

Governance structure
The organisation has a structure for governance in place that supports risk management by providing clearly defined accountabilities, expectations and reporting requirements for all relevant parties.
View further guidance on governance structure

Management ownership
There is unambiguous ownership of every aspect of the risk management process across the organisation. 
View further information on management ownership
Last updated on 20 Jan 2009