ID.RA-06.168
Does your organization have a documented process for communicating risk responses to affected stakeholders in a prioritized manner?
Explanation
This question assesses whether your organization has a formal mechanism to inform relevant stakeholders about how identified risks will be addressed, ensuring those with higher priority are communicated first. Effective risk response communication helps stakeholders understand potential impacts, required actions, and timelines for risk mitigation. Evidence could include a risk communication plan, documented communication workflows showing prioritization criteria, meeting minutes from risk review sessions with stakeholders, or templates used for risk response notifications that demonstrate prioritization methodology.
Implementation Example
Communicate planned risk responses to affected stakeholders in priority order
ID: ID.RA-06.168
Context
- Function
- ID: IDENTIFY
- Category
- ID.RA: Risk Assessment
- Sub-Category
- Risk responses are chosen, prioritized, planned, tracked, and communicated

