
Reduction
- Do you actually know what your top three organisational risks are — and can you name them without opening a document?
- How often does someone honestly reassess whether the assumptions in your risk register still reflect reality?
- Have you tested whether the controls you rely on would hold up in the conditions you are most likely to face?




