An integrated approach led by senior management who had ensured adequate
arrangements to support the process, including competency, training, resource in
terms of finance and people (including their own personal visible support), and
who viewed risk assessment as one factor in a wider decision making process
about the management of risk. In particular the approach had involved calling on
the right competency (whether internal or external) in the right way.