UNECE WP.29 R155 7.2.2.2(d): 7.2.2.2(d) Processes to verify that identified risks are appropriately managed

The processes in place to verify that the risks identified are appropriately managed: decision criteria for treatment, how controls are selected and when a risk may be accepted, so that residual risk stays within the manufacturer's stated tolerance, with the Annex 5 mitigations considered. The Interpretation Document: unfulfilled where project security depends only on completing an assessment regardless of its outcome, there is no systematic process to manage identified risks, or risks sit on a register awaiting decisions for long periods; fulfilled where significant conclusions reach accountable decision makers and the risk management process is periodically reviewed and improved.