Closing out a risk

Hi everybody

What method do you follow to close out a risk in which have been implemented actions to mitigate it?

For the follow-up it is planned to do it in the MRM, but when to stop the follow -up?

Please give your opinion

Thanks

 

The internal audit process can be employed to evaluate effectiveness of the actions taken to address risks and opportunities, since it's one of the intent of clause 9.2.1b. Findings by the internal auditors on the effectiveness of the actions can then be presented during the management review to satisfy clause 9.3.2e.

 

Thanks Tonys, But what you consider is effective, while risks Is kept under control? And for how long?
Thanks

 

If I have to evaluate "effectiveness", I have to stick with its definition. Effectiveness is defined as the "extent to which planned activities are realized and planned results are achieved". Since we are using a tool where every process is analyzed for its risks/opportunities that can affect its planned results/outputs, our internal auditors are tasked to check whether actions to address risks/opportunities are implemented. Each process owner maintains/updates this tool and on each audit cycle, the internal auditors assess the effectiveness of the actions indicated in this tool. See a sample below:

 

Thanks Tony s and Jenni

I appreciate your help, as always very useful.

Regards