7. Risk Assessment and Management
A firm must address its key uncertainties by identifying, measuring, and controlling its existing risks in corporate governance and regulatory compliance, the likelihood of their occurrence, and their economic impact. Then, a process must be implemented to mitigate the causes and effects of those risks. Companies must make these assessments when they anticipate greater uncertainty in their business or when there is a need to enhance their risk culture.