Standard A7: Risk management
Description: The organization has a process to identify its major strategic and operational risks and a plan to minimize and mitigate these risks. The plan is reviewed annually by the board.