- Formal risk assessment exercises are conducted on a periodic basis.
- The senior leadership team defines unacceptable risk thresholds.
- All identified risk events are assigned a severity level based on probability and impact assessments.
- Top risks are reassessed for expected financial impact.
- Key business stakeholders participate in risk assessment exercises.
- Alternative risk assessment methodologies are employed to create accurate expected cost values.