Your risk position, summarised for management, the board or auditors.
Writes the summary of your risk position from your risk register and treatment plan, for management, the board or auditors: main risks and why they matter, where the treatment stands, who still has no owner, what is overdue and the decisions to take. In a project, its sections follow your risk method (ISO 27005, EBIOS RM or NIST RMF).