Risk Management

Risk Management: What is a control?

To understand an organization’s problem, we need to understand how the business is managed.

Map the process to the controls to understand how management knows business is functioning as intended
Look for management of controls to understand impacts to intended business objectives