Risks are assessed and linked to processes and objectives Causes are identified Controls are identified and assessed Action plans are created to mitigate the risk Risk levels are continually monitored Control reviews and action plans are driven to completion and risk profile is updated
{}