Is there a good tool for evaluating risk management?
I was just asked by somebody that attended a presentation of mine last week about tools for assessing the effectiveness of risk management.
This is a topic where I haven’t had a lot of success (finding tools), but did come across one: a 2009 document from the UK Treasury Department. You can find my discussion of it, a link, and a pointer to my own evaluation criteria here.
Do you have something to share on evaluating risk management programs? Does it evaluate their effectiveness, not just whether they conform to a specific risk management framework or standard?