Risk Management and Mitigation
        
        
          •
        
        
          CAs and LEAs should:
        
        
          •
        
        
          have policies, controls and procedures that enable them to
        
        
          effectively manage and mitigate identified risks
        
        
          •
        
        
          be able to monitor the implementation of controls and
        
        
          enhance them
        
        
          •
        
        
          ensure policies and procedures are approved by senior
        
        
          management
        
        
          •
        
        
          ensure measures taken to manage and mitigate risks are
        
        
          consistent with national requirements
        
        
          Obligations for CAs and LEAs - Assessing Risk