Effective public sector risk management requires Risk registries at all level of an organization Management participation Active management and oversight Effective risk identification and assessement