This entails a comprehensive study of the risk management framework implemented by the organisation. This also includes a review of organisation's sensitivity and responsiveness to the risk management environment. The review will also test the robustness / efficacy of processes implemented by the organisation to detect, report and manage risk incidents.