
Are you auditing risk management-or merely auditing compliance with a risk management framework? Risk management should not be about maintaining risk registers, producing heat maps, or demonstrating compliance with a standard. It should help leaders and managers...