Continuous process elements
Communication and consultation
Managing risk necessarily involves people because:
The interests of people are part of the organization’s objectives
People will need to take (or not take) particular actions in order for risk to be managed effectively
People have most of the knowledge and information on which effective risk management relies
Some people might have a right to be informed or consulted.