The questions provided in this sample can be used to analyze and enhance your enterprise risk assessment strategy.

Sample questions include: Is the board satisfied that management is periodically evaluating changes in the operating environment to identify the risks inherent in the corporate strategy? Is the board aware of the most critical risks facing the company? Does the board determine why these risks are significant? Do directors understand the organization's responses to these risks? Do the results of management's risk assessment lead to specific impacts on the business plan and control environment?