DEBAJEET BOSE,CRICP,CAIP

1.Foster a culture of risk awareness by highlighting that everyone is responsible for risk management. 2.Continuous training to be imparted to increase awareness and understanding of risks that may be a threat to the entity. 3.If there is suspicion or any activity suspicious , to immediately bring it to the attention of the management hierarchy without delay 4.Finally , to run the message that everyone is accountable for risk management

1.Have a good understanding of the risk management framework of the client ,the risk and control assessments prepared , audits conducted and observations/corrective actions identified ,oversight reviews etc 2.To bring out the financial/non financial risk not covered/present in the client's assessment reports with the mitigating actions to be taken if the risk/s materialise. Also, to highlight the importance of why the risks should be a part of their assessment reports 3.To bring out any emerging risk industry specific with a to their attention which could aid in their preperation of assessment reports

1.Prepare a comprehensive risk management framework with a focus on top down approach in the achievement of objectives linked to the growth of the company 2.Preparing and updating the risk assessment report covering all risks financial and non financial risks. Insider Threat is a key aspect in the risk assessment report to understand how human intervention can bypass basic controls 3.Run the risk assessment at the senior management and board level for their descision making and also highlight emerging risks which could hamper the growth prospects. 4.Effective communication along the risk management framework to take informed decisions on risk to avoid delays

1.Proactive communication to the board and senior management on the risk exposure 2.Early warning signals on any emerging risk which may impact the organisation from a financial standpoint 3.Weekly updates on the risk appetite and risk tolerance levels and to highlight if there are any breaches for seen 4.Audit findings both internal and external to come under notice of board and management Periodic risk exposure to be discussed and any response plans to be sought approval from board and management

1.Review of the overall risk management framework with key personnel in the framework. 2.Review of the effectiveness of the three lines of defense in terms of role and responsibilities. 3.Engaging with audit committee on key findings impacting the organisation conducted by external and internal auditors and possible treatment of the issues. 4.Engaging with key personnel in risk management framework on emerging risks . 5.Review of dashboards presented to senior management/board submitted by on the issues which are under remediation , emerging risks and closure of potential issues with timelines.

1.Identify risks 2.Establish a risk analysis and do a frequency vs occurrence analysis 3.Run the risk analysis through key personnel and with senior level executives to ensure on time communication and awareness 4.The methodology for treatment of risk should be determined post discussions with key personnel. 5.Monitoring of risks identified through dashboards/email communication/MIS etc.