4.1 Overview
A framework for managing risk needs to incorporate a number of elements. An effective
framework starts with a mandate. Responsibility and accountability for managing risk
needs to be assigned to appropriate people. The framework needs a process and
procedures, as well as a schedule of activities. The process should be supported by
tools, information and documentation to ensure that it is carried out completely and
consistently