Are there any social political legal aspects of risk management that need to addressed in your organisation? How would you review these - or you can give an example of how they have been reviewed.
Is there any legislation requirements, codes of practice, related to your organisation?