Procedure
Risk Acceptance Procedure
This procedure defines how residual risk is formally accepted, reviewed, monitored, renewed, or closed. It prevents undocumented risk ownership from being quietly converted into institutional folklore.
- Type
- Procedure
- Version
- 1.1.4
- Date
- 2026-08-24
- Owner
- Chief Risk Officer
- Approving authority
- Executive Management
- Classification
- Public
- Confidentiality
- Public
- Category
- Core Governance
- Review frequency
- Annual and upon material risk governance change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Procedure
- Approval guidance
- Duration and renewal limits
- Required record fields
Related documents
- Enterprise Governance and Risk Management Policyrisk
- Enterprise Risk Management Standardrisk
- Exception and Risk Acceptance Management Policygovernance
- Risk Appetite Statement Templaterisk
- Enterprise Risk Register Templaterisk
Next
All Documents