Organises ongoing risk monitoring: the review calendar, the events that trigger a reassessment, key risk indicators with thresholds, the follow-up of treatment actions and who does what.
Contents
1. Purpose
2. Review schedule
3. Reassessment triggers
4. Key risk indicators
5. Follow-up of treatment actions
6. Responsibilities and reporting
What you provide
Full risk review
Risk indicators you already follow — E.g. “Critical vulnerabilities open > 30 days”.
Changes expected — Projects, migrations, new suppliers or regulations in the coming year: one per entry.
Roles and owners — Who is responsible for which area. Owners in the deliverable are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the deliverable.
Author — Shown as the author of the deliverable; never filled in by the AI.
Sections, in order — The template's sections are proposed, one per line in order: drag to reorder, rename, remove or add.
