A structured approach to
understanding and managing risk
An effective, continuous cycle of
risk management activities
A consistent approach to risk
throughout the company
An appreciation that risks can be
either desirable or undesirable
An awareness of the requirements
of different stakeholders
A positive risk culture embedded
into all areas of the company.