BLOG

From the practitioner's desk

Notes on GRC, compliance frameworks and running it all inside your own network.

2 posts found

4 August 2026 · By P LarnerBlog post

Writing Risk Statements That Actually Say Something

Why most risk statements say nothing, and the condition, event and consequence structure that fixes them, with real register entries rewritten in full.

Risk Management #condition event consequence #risk register #risk statements #ownership #scoring

4 August 2026 · By P LarnerBlog post

How to Build a Risk Register People Actually Use

How to turn a write-only risk register into a management tool. Keep it small, write real statements, give risks owners with budget, and review by volatility.

Risk Management #review cadence #governance #risk register #ownership #board reporting