Activity
A.14 Risk monitoring and reporting
Monitor and Review
Description
Description
This process makes sure that the specified management action plans remain relevant and updated. In today’s continuously changing business environment, factors affecting the likelihood and consequences of a risk are very likely to change also.
To make Risk Management become a part of the organization’s culture and philosophy, the organization must collect and document experience and knowledge through a consistent monitoring and review of events, treatment plans, results and all relevant records.
Organisation
Responsible
Internal Audit
Accountable
Internal Audit
Consulted
Domain Expert
Risk Owner
Informed
Senior Management
Risk Manager
Input/Output
Input data
D32 Action plan
D39 Implement. progress reports
D79 External ref. docs
D81 Security policies
D33 Resource assignment
D41 Past risk treatment dec.
D80 Add. internal ref. docs
D82 Incidents reports
D28 Risk treatment decision
Output data
D83 Internal stakeh. events
D86 Cost indicators
D84 External parties events
D85 Internal indicators