There are five parts of the process: identify the desired level of risk, determine the current level of risk, bring the current level in line with the desired level, monitor the risk exposure to keep it line with the desired level, and alter the process to reflect new information, policies and preferences. |
