7. Upstream and downstream risk information systems

7.1 Multiple sources of risk information

Risk management needs to be able to draw on different sources of information in order to objectively assess the company's level of risk by entity, department or process. This approach is based on the following input data, which can be consolidated in a Risk Management Information System (RMIS). In this respect, it should be noted that a number of companies offer risk management tools which centralize the following elements: risk mapping, incident database, permanent control plan, internal audits, compliance notices, business continuity plan, etc. The aim of these tools is to provide...