ABSTRACT
It is good practice for an organisation to establish and record its policy on risk management. There are two main reasons for this: • The work required to produce and record a clear statement of policy gives senior managers an opportunity
to think about risk management and what they want their organisation to achieve in risk management terms. This can be reinforced by the senior managers stating their personal commitment to the policy and signing the relevant document.
