A risk management framework flows logically from the definition of risk management that was previously given: It is the infrastructure, process, and analytics needed to support effective risk management in an organisation.
Despite customisation, every risk management system or framework should address the following key factors:
- Risk governance
- Risk identification and measurement
- Risk infrastructure
- Defined policies and processes
- Risk monitoring, mitigation, and management
- Communications
- Strategic analysis or integration
