Describe the eight features of a risk policy.


. Describe what a risk management function structure would look like. How would

members of staff gain access to this structure?


. Why should an organisation have an annual risk management plan?


. Define risk appetite.


 Explain why, in the three lines of defence model, the risk management function does


not take the leading role in the management of risks to the organisation.