The key risks identified are reported periodically through the Framework to the Audit Committee and the Board with the risks being subject to common, standardised and repeatable processes of assessment, evaluation, management and monitoring.