Where there are already controls in place, should the risk be added to the risk register?
For example, if an organisation is new to implementing risk management, is it appropriate to track back from the controls in place to ensure all controls and their corresponding risks are on the risk register?
No comments:
Post a Comment