How do we measure the effectiveness and suitability of a risk management strategy? I went through various frameworks to find out which metrics to use for it. I did not find a clear-cut list, hence derived the following dozen metrics from them to conduct an annual assessment for effectiveness of risk management strategy.