GRC Studio Risk Register ≠ ERM 1 Fit View
A risk register is not Enterprise Risk Management.
A risk register records concerns. ERM should change decisions.
Risk RegisterRecords concerns
ERMChanges decisions
?
3 questions every executive should answer
1
Which strategic objective or critical service could be affected?
2
Which decision is required?
3
What change or threshold would trigger action?