Business risk
Risk map
Ordered inventory of a company's exposures, assessed by probability and impact, from which decisions to prevent, retain, or transfer are derived.
In practice
It is the step prior to the programme, not an annex: without it, the policy is purchased out of habit. Reviewed annually, it is also the document that explains to the board why what is retained is retained.
Where it is addressed
This term is covered in Gestión del programa.
