When performing a risk assessment, it is important to:
- Assess the impact and likelihood of IWT risks.
- Understand the jurisdictional risk exposure.
- Understand the scope of IWT (according to the CITES lists of Endangered Species of Wild Fauna and Flora).
- Define key mitigating controls.
- Identify evidence of control effectiveness.
- Determine whether residual risk is within the organisation's risk appetite.
- Identify actions to mitigate risks outside of an organisation’s risk appetite.
Once you have mapped out the risk you are exposed to as an organisation you can then:
- Set your risk appetite – what is or isn’t acceptable for the Board. Here you may want to consider legal and regulatory obligations, reputational risk and your social impact.
- Set your long term IWT strategy – how are you going to drive your business’s response to this issue and embed it as part of your corporate culture.