Risks that affect how well strategy and business objectives are delivered are identified. New, emerging and changing risks (including emerging technology, big data, shifting demographics, regulation and stakeholder expectations) are identified to establish and then confirm a risk inventory, structured by category where useful and capturing risks at every level; methods range across interviews, workshops, process analysis, key indicators, data tracking and cognitive computing, fitted to existing, new and emerging risks; risks are described precisely with a standard sentence structure that names the possible occurrence and its effect on a specific business objective rather than a root cause or a control failure; and framing effects and other biases in how people perceive risk are recognized.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.