Risks
Risks are identified and tracked.
Questions:
- Has a risk management process been implemented?
- Is there an owner for the process?
- Are risks monitored and actions triggered if necessary?
- Are there supporting BCP (Business Continuity Plans) for managing risks and mobilizing resources?