Risk monitoring is MOST effective when conducted:
Changes in the business environment can change the organization’s risk profile and invalidate assumptions underlying existing risk treatments. Monitoring after such changes enables timely reassessment and adjustment of treatment measures. ISO 31000 describes risk management as including monitoring and communication across the organization and emphasizes adapting risk management to organizational context.
Community Discussion