Where assessments have been conducted the mitigation of accepted risks should be reviewed. The efficiency of communicating and preserving understanding of why systems are in place should be tested. How controls are applied and respected should be examined with observation and understanding of human behaviour. The value of assessments can be lost if their application is not followed through the culture of an organisation and the stages of intervention by human factors identified and rectified.
Benchmark personnel can test the efficiency of controls with members of management and staff helping them to realise their responsibilities for the risk management of the organisation and operation that they work in.
