Understanding an organization’s risk management process helps evaluate whether key risks – those currently existing and those that may impact the organization in the future - are known and are effectively monitored.