8. Glossary

Top-down approach

An exchange method aimed at achieving consensus on the organization's main (strategic and major) risks, based more on the vision of risks held by the organization's governance and general management, and by redeploying this vision to the operating entities.

Bottom-up approach

A method for discussing risks, mainly operational risks, with the teams in charge of the perimeters studied, as well as with business experts. The aim of this method is to provide a detailed analysis of the risks inherent in the processes and departments studied as part of the risk mapping process.

EDMR; risk management devices

Elements of risk management (organization, controls, human resources, tools).

Heat map

Two-entry matrix...