Regular control reviews are a critical component of effective risk management. In StartRisk, users are required to set control review intervals (monthly, quarterly, or annually) to ensure that all control information remains current and relevant. When selecting frequency, consider the following indicators for more frequent reviews:
Control Editor View:
When reviewing a control, check the control title, control description, and risks the control is allocated against (review the impact on the control against the linked risks. Assign a status of No Impact against risks you do not believe the control mitigates).
Keeping this information up-to-date helps in making informed decisions and maintaining an accurate picture of the business risk environment.
Control Effectiveness Rating is a measure indicating how well a control manages or reduces a risk.
Control Impact indicates if a control reduces the probability of a risk event, the impact of a risk event or both.