2 Is the risk management effective?

A further aspect of the periodic reviews of risk management within organisations needs to focus on the effectiveness of the controls in place which aim to ensure that risk policies are adhered to. Without good controls even the most sophisticated risk management policies risk being impaired.