A quantitative assessment of the risk or the KRI is associated with mitigation or reduction of risk exposure. These measures can be understood or organized in a listed group, whereby risks are assessed as “OK” or “Low” for those events, if they occur, that are not relevant to the financial health or the image of the company, or “Critical” to “Acceptable” for those that are very severe and may compromise the survival of the company. The group’s risk managers should define measures of exclusion or mitigation of risks so that they are always on the “Critical” to “Acceptable” level, and the level of investment to be made by the company in mitigating actions should be less than the decrease of the expected risk.
