What to Provide
(1) The documented charter for your organization's Risk Committee (or similar group).
(2) The Risk Committee (or similar group) meeting minutes for a sample of months/quarters.
NOTE: Sampled months/quarters will be updated within the ER description.
Evidence Format
Word/PDF document
Additional Guidance
(1) The charter should include the following:
List the members
List the roles of the group
List the frequency that the group meets
(2) For each sample selected, the meeting minutes should include:
Agenda showing the date of the meeting and topics discussed
Members in attendance
Resulting action items
Associated Unified Control ID | Associated Framework Control |
CTRL-463 | LCL-5 |