Evaluate the overall risk management process Make sure you answer from your own personal experience during this assessment. Was it easy or difficult to identify risks? Was staff input (at the meeting) helpful? How confident are you that all program risks have been identified? Consider whether the process indicated in the current Risk Management Policy and Procedures is sufficient to guide the risk management process for program management. Explain why or why not. Explain whether the principles of risk management in the risk management policy and procedure is consistent with AS/NZS ISO31000:2009 Risk Management Principles and Guidance