How often do you survey your organization for new, emerging risks? My company currently does quarterly surveys and I am contemplating dropping it down to 2x/year. Appreciate the insights!
Sort by:
Director of Design in Healthcare and Biotech2 days ago
It sort of depends how formal processes are related to taking action on the risks identified. We do one annual comprehensive enterprise risk assessment followed by an semi-annual update. If our process was more formal with clear risk owners, there may be a reason for more frequent updates.
2x ideally, but honestly really once a year generally around annual assessment time