Describe the eight features of a risk policy.
. Describe what a risk management function structure would look like. How would
members of staff gain access to this structure?
. Why should an organisation have an annual risk management plan?
. Define risk appetite.
Explain why, in the three lines of defence model, the risk management function does
not take the leading role in the management of risks to the organisation.
