Global Risk Clinic GRC Studio All posts

Risk Register ≠ ERM

1 slide, 1080px canvas, from risk-register-erm.html

Open canvas
A risk register is not Enterprise Risk Management.
A risk register records concerns. ERM should change decisions.
Risk RegisterRecords concerns
ERMChanges decisions
?
3 questions every executive should answer
1
Which strategic objective or critical service could be affected?
2
Which decision is required?
3
What change or threshold would trigger action?