A table or other appropriate structure used to facilitate the description and assessment of risks.
The use of a well designed structure is necessary to ensure a comprehensive assessment process.
Strategy/objectives should also feature to identify function responsible for developing strategy and policy.
By considering the consequence and probability of each of the risks, it should be possible to prioritise the key risks that need to be analysed in more detail.
Working In Uncertainty - A better perspective on risk management and internal control, www.workinginuncertainty.co.uk