• Do you know what the greatest risks are to the survival of your organisation?

• Have you embedded risk management in your day to day operations?

• Are your risks assisting and not hindering your organisation?

• Do you have a right balance of risk appetite within your organisation?

• Are you sure the controls are focused at the right level, and on the right activity

• Are you people aware of risks?

• Is your risk framework robust enough?

• Have you been able to embed the risk across your organisation , functions, operations and processes?

• Do you comply with ISO 31000 and ANZ4360 guidelines on risk management?