The embedding of risk management processes is taking place at all levels of the organisation, so that risks associated with changes or investments can be systematically identified and managed in a comprehensive and integrated way.