The Risk Office then challenges management on the reported risk information (including assessments, implemented mitigations and next milestones), and consolidates on a quarterly basis reported risks into a corporate profile containing the company’s key risks.