Planificar el establecimiento de su Marco de Gestión de Riesgos
1.1 Pida a las partes interesadas que apoyen el establecimiento de un marco.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
1.4 Identifique brechas en sus prácticas y procesos de gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
1.5 Establezca un marco que satisfaga las necesidades únicas de su organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
1.6 Establecer un marco que llene los vacíos en las prácticas y procesos existentes.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
1.9 Considere cómo va a llenar los vacíos en sus prácticas y procedimientos existentes.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
1.10 Considere cómo va a hacer que la gestión de riesgos forme parte de su organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
1.11 Considere cómo va a integrar la gestión de riesgos en todas las actividades importantes
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
1.12 Considere cómo va a incorporar la gestión de riesgos en todas las actividades de toma de decisiones.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
1.13 Considere cómo va a integrar la gestión de riesgos en todas las funciones importantes.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
1.14 Considere cómo va a incorporar la gestión de riesgos en todas las funciones de gobierno.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
Mostrar liderazgo comprometiéndose con la gestión de riesgos
2.3 Solicitar a los órganos de control que se comprometan con la gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.4 Solicitar a los órganos de control que alineen la gestión de riesgos con la estrategia de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.5 Solicitar a los órganos de control que alineen la gestión de riesgos con la cultura de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.6 Solicitar a los órganos de control que alineen la gestión de riesgos con los objetivos de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.7 Solicitar a los órganos de control que alineen la gestión de riesgos con las obligaciones de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.8 Solicitar a los órganos de control que alineen la gestión de riesgos con los compromisos voluntarios.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.9 Solicitar a los órganos de control que rindan cuentas de la supervisión de la gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.10 Pídales que se aseguren de que los riesgos se comprendan en toda la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.11 Pídales que se aseguren de que los riesgos se comuniquen en toda la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.12 Pídales que se aseguren de que se comunican los métodos de gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.13 Pídales que se aseguren de que la gestión de riesgos esté integrada en todas las actividades.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.14 Pídales que se aseguren de que se implementen los sistemas de gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.15 Pídales que se aseguren de que los sistemas de gestión de riesgos funcionen de manera eficaz.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.16 Pídales que se aseguren de que el riesgo se evalúe correctamente al establecer los objetivos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.17 Pídales que se aseguren de que el riesgo se gestione adecuadamente al lograr los objetivos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.18 Solicitar a los órganos de control que comuniquen el valor de la gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.19 Pídales que comuniquen el valor de la gestión de riesgos a la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.20 Pídales que comuniquen el valor de la gestión de riesgos a las partes interesadas.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.21 Pida a la alta dirección que se comprometa con la gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.22 Pida a la alta dirección que alinee la gestión de riesgos con la estrategia de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.23 Pida a la alta dirección que alinee la gestión de riesgos con la cultura de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.24 Pida a la alta dirección que alinee la gestión de riesgos con los objetivos de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.25 Pida a la alta dirección que alinee la gestión de riesgos con las obligaciones de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.26 Pida a la alta dirección que alinee la gestión de riesgos con los compromisos voluntarios.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.27 Pida a la alta dirección que se asegure de que se desarrollen los criterios de riesgo apropiados.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.28 Pídales que se aseguren de que los criterios de riesgo se comuniquen en toda la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.29 Pídales que se aseguren de que los criterios de riesgo se comuniquen a todas las partes interesadas pertinentes.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.30 Pida a la alta dirección que comunique el valor de la gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.31 Pida a los gerentes que comuniquen el valor de la gestión de riesgos a la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.32 Pida a los gerentes que comuniquen el valor de la gestión de riesgos a las partes interesadas.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.33 Pida a la alta dirección que sea responsable de gestionar la gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.34 Pídales que se aseguren de que la gestión de riesgos esté integrada en todas las actividades.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.35 Pida a la alta dirección que controle los riesgos únicos que enfrenta su organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.36 Pida a la alta dirección que anime al personal a controlar sistemáticamente los riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.38 Pídales que desarrollen un marco que satisfaga las necesidades de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.39 Pídales que preparen una declaración de política general de gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.41 Pídales que preparen un plan de acción general de gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.42 Pídales que responsabilicen a las personas de la gestión del riesgo.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.44 Pídales que asignen responsabilidades en todos los niveles apropiados.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.47 Pídales que asignen todos los recursos necesarios para la gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.48 Pídales que supervisen la aplicación de su marco de gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
2.49 Pídales que se aseguren de que siga siendo apropiado para el contexto de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
Haga que el personal de su organización sea responsable de la gestión del riesgo
3.1 Haga de la gestión de riesgos una parte integral de la cultura de su organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.2 Pídale a todos en su organización que sean responsables de administrar el riesgo.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.3 Pídale a su personal de gobierno que sea responsable de administrar el riesgo.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.4 Pídales que sean responsables de hacer que la gestión de riesgos forme parte de la gobernanza.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.5 Pídales que se responsabilicen de hacerlo parte del propósito de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.6 Pídales que se encarguen de hacerlo parte de la dirección de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.7 Pídeles que se encarguen de hacerlo parte de la estrategia de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.8 Pídales que se encarguen de hacer que la gestión de riesgos forme parte de la gestión.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.9 Pídales que responsabilicen a la gerencia por la implementación de la gestión de riesgos.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.10 Pida a su personal de gestión que se encargue de gestionar el riesgo.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.11 Pídales que se encarguen de hacer que la gestión de riesgos forme parte de la gestión.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.12 Pídales que hagan de la gestión de riesgos parte de las funciones de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.13 Pídales que hagan de la gestión de riesgos parte de las políticas de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.14 Pídales que hagan de la gestión de riesgos parte de los objetivos de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.15 Pídales que hagan de la gestión de riesgos parte de las operaciones de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.16 Pídales que hagan de la gestión de riesgos parte de los procesos de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.17 Pídales que hagan de la gestión de riesgos parte de las prácticas de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.18 Pídales que hagan de la gestión de riesgos parte de las reglas de la organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.19 Pídale a su personal de base que sea responsable de administrar el riesgo.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.20 Utilice métodos iterativos para incorporar la gestión de riesgos en su organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.21 Asegúrese de que sus métodos iterativos satisfagan las necesidades de su organización.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
3.22 Asegúrese de que los métodos de su organización sean compatibles con su cultura.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
Diseñe el marco de gestión de riesgos único de su organización
4.2 Tenga en cuenta el contexto de su organización cuando diseñe su marco.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
4.4 Tenga en cuenta las influencias externas durante el diseño del marco.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
4.5 Considere a las partes interesadas externas durante el diseño del marco.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
4.6 Examinar y comprender las necesidades de las partes interesadas externas.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
4.7 Examinar y comprender los valores de las partes interesadas externas.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
4.8 Examinar y comprender las percepciones de las partes interesadas externas.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
4.9 Examinar y comprender las expectativas de las partes interesadas externas.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)
4.10 Examinar y comprender las relaciones con las partes interesadas externas.
![](https://fullaudits.com/wp-content/uploads/2022/10/check-2-p9q5uyj72ynrul7lgmlk2sy2sy6ltn3lepipi2i564-1.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/cruz.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/nm.png)
![](https://fullaudits.com/wp-content/uploads/2022/10/na-1.png)