Risk Management: Simplifying Critical Controls Management
The identification of material risks, their critical controls, and the processes to put in place to manage them is difficult at best.
Answering the following types of questions is challenging – what are our Material Risks? What is a Bowtie? Do I need a Bowtie? What are our Critical Controls? What is the definition of a Critical Control? How do I ensure our Critical Controls are effective? Who is responsible for managing Critical Controls? What does it mean if a Critical Control is not effective? How do you measure the effectiveness of a Critical Control?
In our view, managing Critical Controls should not be complex. There should be a simple, objective process to identify, implement, and monitor Critical Controls. The purpose of this practical session is to walk participants through this management process using their own organisations risk information to enable understanding.