ABSTRACT
Risk reports can play a number of different roles, especially in a large organisation. Chapter 6 discussed the communication/consultation process where the goal might be to educate stakeholders about risk or to support a discussion about the need to introduce or significantly upgrade a risk management framework.
This chapter addresses a different challenge. We assume that a risk management framework is operating. How is information about risk reported in the organisation in a ‘business as usual’ sense and also for the purpose of monitoring and review of the framework? Effective reports aid understanding, encompass all the crucial issues as briefly as possible, and support good and timely decisions.
