������Ƶ

1. Industry-Specific Requirements: Additional requirements for specific sectors (e.g., financial services, healthcare)

2. Regulatory Compliance: Specific section for assessments focusing on regulatory maturity, used when regulatory compliance is a key concern

3. Third-Party Risk Management: Assessment of supply chain and third-party risk management, included when vendor risk is significant

4. IT and Cybersecurity Focus: Detailed assessment of technology risks, used when IT risks are a primary concern

5. Business Continuity Assessment: Specific focus on business continuity maturity, included when continuity is a key objective

6. Environmental Risk Assessment: Assessment of environmental risk management, included for organizations with significant environmental impact

7. Change Management: Section covering assessment of change management processes, used when organizational change is relevant

1. Schedule A - Assessment Framework: Detailed matrix of risk maturity levels and assessment criteria

2. Schedule B - Interview Guidelines: Structure and questions for stakeholder interviews

3. Schedule C - Documentation Requirements: List of required documents and evidence for the assessment

4. Schedule D - Scoring Methodology: Detailed explanation of how maturity scores are calculated

5. Schedule E - Report Template: Standard format for the assessment report

6. Appendix 1 - Risk Categories: Comprehensive list of risk categories to be assessed

7. Appendix 2 - Maturity Level Definitions: Detailed descriptions of each maturity level

8. Appendix 3 - Best Practice Reference: Industry standards and best practices used as benchmarks