Management processes should always be as simple as possible - yet as complex as is necessary.
First, clear, understandable, straightforward risk statements come out of mindful conversations about context.
Second, we assess risks - not as an academic exercise - but in order to determine whether we need to do anything about those risks. So it’s important to do that both rigorously and consistently - with strong criteria based decision making processes.
Third, effective risk treatments are also best determined by applying rigorous, consistent criteria.
To support the quality of your risk management process our Macro-enabled Excel Workbook - is available as an immediate download - at http://bit.ly/IdentifyAssessTreat