Description
The heart of the risk management process is the risk register, where SAM managers document and track the treatment of SAM risks, but equally important is aligning to organisational and IT risk management policies to ensure that accountability for managing software related risks sits with the correct party – generally NOT the SAM Manager – and that the SAM sponsor plays an appropriate oversight role.