Monitoring and review
Monitoring and review are two distinct processes intended to detect change and determine the ongoing validity of assumptions. Both are necessary to ensure that an organisation maintains a current and correct understanding of its risks, and that those risks remain within its risk criteria. Both require a systematic approach, integrated into an organisation’s management systems, that reflects the speed at which change occurs within the internal and external environment.