Risks

 

Risks are identified and tracked.

 

Questions:

  • Has a risk management process been implemented?
  • Is there an owner for the process?
  • Are risks monitored and actions triggered if necessary?
  • Are there supporting BCP (Business Continuity Plans) for managing risks and mobilizing resources?