9 Summary of Session 5

Session 5 covered the area of risk management that is considered to provide the greatest benefit to the business: risk treatment. This session initially covered the treatment strategies available: accept, reject, transfer and mitigate. You then focused on mitigation and looked at the main areas of activity: implementing actions and operating controls.

The remainder of the session looked at how to review and assess the effectiveness of the actions and controls – a process that is essential for providing confirmation to organisations that its risk management systems are robust.

The main learning points that have been covered in this session are:

• an overview of treatment
• treatment strategies
• an introduction to mitigation through action
• knowledge of an introduction to controls
• assessing treatment effectiveness
• an example of a treatment plan.