The following sample outlines a set of policies and procedures for structuring risk management activities to ensure that risks are identified, assessed, managed, monitored and reported in a uniform manner. The aim of risk management is to provide reasonable assurance that companies understand the risks associated with achieving business objectives, and that they are responding appropriately to these risks at all levels within the organization.