Home / Risk assessment / Stage 6
The risk management process and its outcomes should be documented and reported through appropriate mechanisms. Recording and reporting aims to:
Decisions concerning the creation, retention and handling of documented information should take into account, but not be limited to: their use, information sensitivity and the external and internal context.
Reporting is an integral part of the organization’s governance and should enhance the quality of dialogue with stakeholders and support top management and oversight bodies in meeting their responsibilities.
Factors to consider for reporting include, but are not limited to: