All roles
Health, safety, environment and risk manager
“Which controls can I evidence as operating, and which are only designed?”
- Step 1. Risk and controls register
Record which controls exist, which operate and which have been independently tested.
Produces: Controls registerOpen this step - Step 2. Disclosure readiness
Check the risk management and assurance expectations that sit above the controls.
Produces: Risk management evidence positionWhat this surfaces is usually owned by someone else. Hand the gaps to your sustainability or esg lead.
Open this step - Step 3. Evidence pack
Produce the register in a form an auditor can trace.
Produces: Evidence packOpen this step
You finish with: Controls register with effectiveness, owners and citations
Your answers are held in this browser only. They are not sent to us and do not follow you to another device. Export the evidence pack to keep a copy.
Build the evidence pack