Figure 2 identifies the two levels of activity in the implementation of Risk Management: strategic and tactical levels; and identifies the specific entities that will steer, facilitate or perform Risk improvement activities at each level.
At the strategic level, the first of these entities is the Enhanced Framework Steering Committee Members. The second is the Enhanced Framework Implementation Team is responsible for facilitating its implementation across the government and assisting departments with their respective improvements. A Risk Management Special Interest Group contributes to the Enhanced Framework Implementation Team.
At the tactical or departmental level, Risk Management improvement activities may be governed simply by the Head of IT, a Departmental Office of Primary Interest for Risk Management and Project Teams.