PMO-06.06
Phase 06: Monitoring and Controlling
RISK AUDIT REPORT
ุชูุฑูุฑ ุชุฏููู ุงูู
ุฎุงุทุฑ
tasleemat asset PMO-06.06 template --lang en
Deliverable Summary & Governance Boundaries
Lifecycle Phase Alignment
Phase 06: Monitoring and Controlling
Sizing Tier Requirements
Validation Contract
This deliverable conforms to a strict companion Draft 2020-12 JSON Schema for automated structural and semantic validation.
tasleemat validate PMO-06.06 ./completed_data.jsonTemplate Markdown (Bilingual)
<!-- LLM INSTRUCTIONS: Fill in the [ Add details... ] placeholders based on project context.
Risk audits evaluate the effectiveness of risk identification, risk responses, and the risk management process as a whole. Information reviewed includes risk event audits, risk response audits, risk management process audits, good practices, and areas for improvement.
Section Instructions:
* Audit Information: Record audit scope, period covered, level of analysis, reference documents reviewed, and audit method.
* Risk Event Audits: Evaluate risk events reviewed, causes, responses implemented, and whether the event could have been foreseen.
* Risk Response Audits: Evaluate responses, whether successful, and actions to improve.
* Risk Management Process Audit: Assess process compliance and tools/techniques used.
* Good Practices: Describe practices to share with other projects.
* Areas for Improvement: Describe practices needing improvement, the improvement plan, and follow-up information.
* Comments: Additional audit observations and commentary. -->
<h3 align="right">{{Company_Name}}</h3>
<h2 align="right">{{Project_Name}} - {{Project_ID}}</h2>
<h1 align="center">RISK AUDIT REPORT</h1>
| **Date Prepared:** {{Current_Date}} | **Project Manager:** {{Project_Manager_Name}} | **Prepared By:** {{Prepared_By}} |
| :--- | :--- | :--- |
---
## 1. Audit Information
| Field | Entry |
| :--- | :--- |
| **Audit Scope** | [ Add details... ] |
| **Period Covered** | [ Add details... ] |
| **Level of Analysis** | [ Add details... ] |
| **Reference Documents Reviewed** | [ Add details... ] |
| **Audit Method** | [ Add details... ] |
---
## 2. Risk Event Audits
| Risk Event | Cause | Response Implemented | Comment |
| :--- | :--- | :--- | :--- |
| [ Add details... ] | [ Add details... ] | [ Add details... ] | [ Add details... ] |
| [ Add details... ] | [ Add details... ] | [ Add details... ] | [ Add details... ] |
| [ Add details... ] | [ Add details... ] | [ Add details... ] | [ Add details... ] |
---
## 3. Risk Response Audits
| Risk Event | Response | Successful? | Actions to Improve |
| :--- | :--- | :--- | :--- |
| [ Add details... ] | [ Add details... ] | [ Add details... ] | [ Add details... ] |
| [ Add details... ] | [ Add details... ] | [ Add details... ] | [ Add details... ] |
| [ Add details... ] | [ Add details... ] | [ Add details... ] | [ Add details... ] |
---
## 4. Risk Management Process Audit
### 4.1 Process Compliance
| Risk Management Process | Followed as Planned? | Observation |
| :--- | :--- | :--- |
| **Plan Risk Management** | [ Add details... ] | [ Add details... ] |
| **Identify Risks** | [ Add details... ] | [ Add details... ] |
| **Perform Qualitative Risk Analysis** | [ Add details... ] | [ Add details... ] |
| **Perform Quantitative Risk Analysis** | [ Add details... ] | [ Add details... ] |
| **Plan Risk Responses** | [ Add details... ] | [ Add details... ] |
| **Control Risks** | [ Add details... ] | [ Add details... ] |
### 4.2 Tools and Techniques
| Risk Management Process | Tools and Techniques Used | Successful? |
| :--- | :--- | :--- |
| **Identify Risks** | [ Add details... ] | [ Add details... ] |
| **Perform Qualitative Risk Analysis** | [ Add details... ] | [ Add details... ] |
| **Perform Quantitative Risk Analysis** | [ Add details... ] | [ Add details... ] |
| **Plan Risk Responses** | [ Add details... ] | [ Add details... ] |
| **Control Risks** | [ Add details... ] | [ Add details... ] |
---
## 5. Good Practices
[ Add details... ]
---
## 6. Areas for Improvement
| Area for Improvement | Improvement Plan | Follow-up Date / Corrective Action |
| :--- | :--- | :--- |
| [ Add details... ] | [ Add details... ] | [ Add details... ] |
| [ Add details... ] | [ Add details... ] | [ Add details... ] |
| [ Add details... ] | [ Add details... ] | [ Add details... ] |
---
## 7. Comments
[ Add details... ]
---
### Sign-off and Approvals
| Role | Name | Signature | Date |
| :--- | :--- | :---: | :---: |
| **Lead Risk Auditor** | {{Lead_Auditor_Name}} | _______________________ | [ .... - .... - .... ] |
| **Risk Manager** | {{Risk_Manager_Name}} | _______________________ | [ .... - .... - .... ] |
| **Project Sponsor** | {{Project_Sponsor_Name}} | _______________________ | [ .... - .... - .... ] |
---
<div align="right" style="margin-top: 20px; font-size: 12px; color: #7f8c8d;">
<span>Electronic Audit Trail: Hash SHA256: {{Audit_Trail_SHA256_Hash}}</span> <br>
<strong>Template:</strong> RISK AUDIT REPORT | <strong>Ref:</strong> PMO-06.06 <br>
<i>Generated on: {{Current_Timestamp}}, by <a href="https://github.com/fakhruldeen/Tasleemat/" style="color: #7f8c8d;">Tasleemat</a></i>
</div>
User Guide & Practitioner Instructions
Tasleemat Forms Guide
Project Artifact: Risk Audit
Document Reference: PMO-06.06
This document provides a comprehensive, professional reference to understand the purpose and effective usage of the Risk Audit in alignment with the Tasleemat framework.
1. What?
A structured audit report assessing compliance with risk processes and analyzing the efficacy of risk response strategies.
2. Why?
Ensures continuous improvement in risk identification and verifies that organizational risk policies are followed.
3. When?
Conducted periodically at designated milestones or upon major risk triggers during project execution.
4. Who?
Conducted by an independent Risk Auditor or PMO Lead and submitted to the Project Manager and Governance Board.
Tailoring Tips
- Scale audit depth based on project risk classification and regulatory compliance requirements.
- Focus on recurring operational risk patterns in iterative sprint retrospectives.
Alignment & Dependencies
1. Pre-requisites & Inputs (Upstream Dependencies)
- Mandatory:
- Approved Project Baselines (PMO-04.01.01)
- Work Performance Data & Logs (PMO-05.01 - 05.12)
- Optional / Contextual:
- Risk Register (PMO-04.08.02)
- Vendor Agreements (PMO-04.09.04)
2. Downstream Dependents
- Mandatory:
- Change Requests (PMO-05.03)
- Project / Phase Closeout (PMO-07.03)
- Lessons Learned Summary (PMO-07.01)
- Optional / Contextual:
- Transition to Operations Checklist (PMO-07.04)
- Value Realization Register (PMO-01.03)
5. How?
To accurately and professionally complete the Risk Audit, the responsible party
must populate the following critical sections based on the project context (ensure parameters.md is referenced for global project variables):
- Audit Scope: The defined scope and boundaries of the risk audit.
- Period Covered: The timeframe examined by the risk audit.
- Level of Analysis: The organizational or WBS level examined during the audit.
- Reference Documents Reviewed: Key governance documents and logs reviewed during the audit.
- Audit Method: The methodology and evaluation techniques applied during the audit.
- Risk Event Audits: Evaluation of materialized risk events, root causes, response effectiveness, and foreseeability.
- Risk Response Audits: Detailed assessment of planned risk responses and their practical execution success.
- Process Compliance: Evaluation of organizational compliance with established PMBOK risk processes.
- Tools and Techniques: Assessment of the effectiveness of risk assessment tools and analytical models applied.
- Good Practices: Proven risk management practices and techniques recommended for broader adoption.
- Areas for Improvement: Identified procedural deficiencies, corrective action plans, owners, and due dates.
- Comments: Additional audit observations, limitations, or stakeholder commentary.
6. Reference Example
A fully completed, gold-standard reference example illustrating this artifact in practice is available:
๐ Completed Example: 06_06_Risk_Audit_Example.md
LLM Generation Prompt & Agent Instructions
Risk Audit - Generation Prompt
System Instructions: This document contains instructions for generating the ยซRisk Auditยป. When asked to fill this template, follow the section-by-section instructions below. Refer to
parameters.mdfor project variables.Context and Definition: A quality assurance process evaluating the effectiveness of risk management processes, responses, and risk event treatments.
Alignment & Dependencies: * Pre-requisites (Inputs): * Mandatory: Approved Project Baselines (PMO-04.01.01), Work Performance Data & Logs (PMO-05.01 - 05.12) * Optional: Risk Register (PMO-04.08.02), Vendor Agreements (PMO-04.09.04) * Downstream Dependents: * Mandatory: Change Requests (PMO-05.03), Project / Phase Closeout (PMO-07.03), Lessons Learned Summary (PMO-07.01) * Optional: Transition to Operations Checklist (PMO-07.04), Value Realization Register (PMO-01.03)
Audit Information
Audit Scope
Instruction: The defined scope and boundaries of the risk audit.
Generated Value: [ Add details... ]
Period Covered
Instruction: The timeframe examined by the risk audit.
Generated Value: [ Add details... ]
Level of Analysis
Instruction: The organizational or WBS level examined during the audit.
Generated Value: [ Add details... ]
Reference Documents Reviewed
Instruction: Key governance documents and logs reviewed during the audit.
Generated Value: [ Add details... ]
Audit Method
Instruction: The methodology and evaluation techniques applied during the audit.
Generated Value: [ Add details... ]
Risk Event Audits
Risk Event Audits
Instruction: Evaluation of materialized risk events, root causes, response effectiveness, and foreseeability.
Generated Value: [ Add details... ]
Risk Response Audits
Risk Response Audits
Instruction: Detailed assessment of planned risk responses and their practical execution success.
Generated Value: [ Add details... ]
Risk Management Process Audit
Process Compliance
Instruction: Evaluation of organizational compliance with established PMBOK risk processes.
Generated Value: [ Add details... ]
Tools and Techniques
Instruction: Assessment of the effectiveness of risk assessment tools and analytical models applied.
Generated Value: [ Add details... ]
Good Practices
Good Practices
Instruction: Proven risk management practices and techniques recommended for broader adoption.
Generated Value: [ Add details... ]
Areas for Improvement
Areas for Improvement
Instruction: Identified procedural deficiencies, corrective action plans, owners, and due dates.
Generated Value: [ Add details... ]
Comments
Comments
Instruction: Additional audit observations, limitations, or stakeholder commentary.
Generated Value: [ Add details... ]
PMO-06.06
Phase 06: Monitoring and Controlling
Realistic Case Study Benchmark
Risk Audit (Reference Example)
๐ Gold Standard Reference Example: This document illustrates a fully completed, production-grade artifact adhering to the Tasleemat PMO Framework (
PMO-06.06). All company names, project references, and figures are realistic fictional simulations.
Apex Global Solutions
Apex Unified Cloud ERP & Supply Chain Modernization - PRJ-2026-ERP-01
RISK AUDIT REPORT
1. Audit Information
| Field | Entry |
|---|---|
| Audit Scope | Deploy and integrate unified cloud ERP platform across all enterprise units |
| Period Covered | Approved and aligned with Apex Global Solutions governance baseline |
| Level of Analysis | Approved and aligned with Apex Global Solutions governance baseline |
| Reference Documents Reviewed | Approved and aligned with Apex Global Solutions governance baseline |
| Audit Method | Approved and aligned with Apex Global Solutions governance baseline |
2. Risk Event Audits
| Risk Event | Cause | Response Implemented | Comment |
|---|---|---|---|
| Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
| Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
| Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
3. Risk Response Audits
| Risk Event | Response | Successful? | Actions to Improve |
|---|---|---|---|
| Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
| Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
| Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
4. Risk Management Process Audit
4.1 Process Compliance
| Risk Management Process | Followed as Planned? | Observation |
|---|---|---|
| Plan Risk Management | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
| Identify Risks | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
| Perform Qualitative Risk Analysis | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
| Perform Quantitative Risk Analysis | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
| Plan Risk Responses | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
| Control Risks | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
4.2 Tools and Techniques
| Risk Management Process | Tools and Techniques Used | Successful? |
|---|---|---|
| Identify Risks | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
| Perform Qualitative Risk Analysis | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
| Perform Quantitative Risk Analysis | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
| Plan Risk Responses | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
| Control Risks | Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline |
5. Good Practices
This section has been thoroughly documented and validated in accordance with Apex Global Solutions operational baseline and PMO delivery governance standards.
6. Areas for Improvement
| Area for Improvement | Improvement Plan | Follow-up Date / Corrective Action |
|---|---|---|
| Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | 2026-06-30 |
| Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | 2026-09-30 |
| Approved and aligned with Apex Global Solutions governance baseline | Approved and aligned with Apex Global Solutions governance baseline | 2026-11-30 |
7. Comments
This section has been thoroughly documented and validated in accordance with Apex Global Solutions operational baseline and PMO delivery governance standards.
Sign-off and Approvals
| Role | Name | Signature | Date |
|---|---|---|---|
| Lead Risk Auditor | Adel Al-Mutairi, CIA | [Electronically Signed] | 2026-03-18 |
| Risk Manager | Layla Al-Omari, PMI-RMP | [Electronically Signed] | 2026-03-18 |
| Project Sponsor | Dr. Muna Al-Ghamdi (Executive VP of Technology) | [Electronically Signed] | 2026-03-18 |
| --- |
Template: RISK AUDIT REPORT | Ref: PMO-06.06
Generated on: 2026-03-15 10:00 UTC, by Tasleemat
Generated on: 2026-03-15 10:00 UTC, by Tasleemat
Draft 2020-12 JSON Schema
Canonical machine-readable data contract for automated payload validation with tasleemat CLI.
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://tasleemat.pmo/schemas/completed/PMO-06.06.schema.json",
"title": "Completed RISK AUDIT REPORT Data Contract",
"description": "Additive structural schema validating completed RISK AUDIT REPORT artifact data payloads (PMO-06.06).",
"type": "object",
"properties": {
"artifact_id": {
"type": "string",
"const": "PMO-06.06"
},
"metadata": {
"type": "object",
"properties": {
"project_name": {
"type": "string",
"minLength": 1
},
"project_code": {
"type": "string"
},
"date_prepared": {
"type": "string",
"format": "date"
},
"project_manager": {
"type": "string",
"minLength": 1
},
"prepared_by": {
"type": "string",
"minLength": 1
},
"version": {
"type": "string"
},
"status": {
"type": "string",
"enum": [
"draft",
"baselined",
"in_review",
"approved"
]
}
},
"required": [
"project_name",
"date_prepared",
"project_manager",
"prepared_by"
]
},
"audit_information": {
"type": "object",
"properties": {
"audit_scope": {
"type": "string",
"minLength": 1,
"description": "The defined scope and boundaries of the risk audit."
},
"period_covered": {
"type": "string",
"minLength": 1,
"description": "The timeframe examined by the risk audit."
},
"level_of_analysis": {
"type": "string",
"minLength": 1,
"description": "The organizational or WBS level examined during the audit."
},
"reference_documents_reviewed": {
"type": "string",
"minLength": 1,
"description": "Key governance documents and logs reviewed during the audit."
},
"audit_method": {
"type": "string",
"minLength": 1,
"description": "The methodology and evaluation techniques applied during the audit."
}
},
"required": [
"audit_scope",
"period_covered",
"level_of_analysis",
"reference_documents_reviewed",
"audit_method"
]
},
"risk_event_audits": {
"type": "object",
"properties": {
"risk_event_audits": {
"type": "string",
"minLength": 1,
"description": "Evaluation of materialized risk events, root causes, response effectiveness, and foreseeability."
}
},
"required": [
"risk_event_audits"
]
},
"risk_response_audits": {
"type": "object",
"properties": {
"risk_response_audits": {
"type": "string",
"minLength": 1,
"description": "Detailed assessment of planned risk responses and their practical execution success."
}
},
"required": [
"risk_response_audits"
]
},
"risk_management_process_audit": {
"type": "object",
"properties": {
"process_compliance": {
"type": "string",
"minLength": 1,
"description": "Evaluation of organizational compliance with established PMBOK risk processes."
},
"tools_and_techniques": {
"type": "string",
"minLength": 1,
"description": "Assessment of the effectiveness of risk assessment tools and analytical models applied."
}
},
"required": [
"process_compliance",
"tools_and_techniques"
]
},
"good_practices": {
"type": "object",
"properties": {
"good_practices": {
"type": "string",
"minLength": 1,
"description": "Proven risk management practices and techniques recommended for broader adoption."
}
},
"required": [
"good_practices"
]
},
"areas_for_improvement": {
"type": "object",
"properties": {
"areas_for_improvement": {
"type": "string",
"minLength": 1,
"description": "Identified procedural deficiencies, corrective action plans, owners, and due dates."
}
},
"required": [
"areas_for_improvement"
]
},
"comments": {
"type": "object",
"properties": {
"comments": {
"type": "string",
"minLength": 1,
"description": "Additional audit observations, limitations, or stakeholder commentary."
}
},
"required": [
"comments"
]
}
},
"required": [
"artifact_id",
"metadata",
"audit_information",
"risk_event_audits",
"risk_response_audits",
"risk_management_process_audit",
"good_practices",
"areas_for_improvement",
"comments"
]
}๐ Form Field Definitions Dictionary (Legacy Specification)
{
"form_name": "RISK AUDIT REPORT",
"document_reference": "PMO-06.06",
"_llm_instructions": "Populate the fields of 'RISK AUDIT REPORT' and write the value of each field under 'Generated Value', based on the project context. Context: the project carrying reference PMO-06.06.",
"project_title": "",
"date_prepared": "",
"fields": {
"f01_Audit_Scope": {
"section": "Audit Information",
"label": "Audit Scope",
"guidance": "The defined scope and boundaries of the risk audit.",
"value": ""
},
"f02_Period_Covered": {
"section": "Audit Information",
"label": "Period Covered",
"guidance": "The timeframe examined by the risk audit.",
"value": ""
},
"f03_Level_of_Analysis": {
"section": "Audit Information",
"label": "Level of Analysis",
"guidance": "The organizational or WBS level examined during the audit.",
"value": ""
},
"f04_Reference_Documents_Reviewed": {
"section": "Audit Information",
"label": "Reference Documents Reviewed",
"guidance": "Key governance documents and logs reviewed during the audit.",
"value": ""
},
"f05_Audit_Method": {
"section": "Audit Information",
"label": "Audit Method",
"guidance": "The methodology and evaluation techniques applied during the audit.",
"value": ""
},
"f06_Risk_Event_Audits": {
"section": "Risk Event Audits",
"label": "Risk Event Audits",
"guidance": "Evaluation of materialized risk events, root causes, response effectiveness, and foreseeability.",
"value": ""
},
"f07_Risk_Response_Audits": {
"section": "Risk Response Audits",
"label": "Risk Response Audits",
"guidance": "Detailed assessment of planned risk responses and their practical execution success.",
"value": ""
},
"f08_Process_Compliance": {
"section": "Risk Management Process Audit",
"label": "Process Compliance",
"guidance": "Evaluation of organizational compliance with established PMBOK risk processes.",
"value": ""
},
"f09_Tools_and_Techniques": {
"section": "Risk Management Process Audit",
"label": "Tools and Techniques",
"guidance": "Assessment of the effectiveness of risk assessment tools and analytical models applied.",
"value": ""
},
"f10_Good_Practices": {
"section": "Good Practices",
"label": "Good Practices",
"guidance": "Proven risk management practices and techniques recommended for broader adoption.",
"value": ""
},
"f11_Areas_for_Improvement": {
"section": "Areas for Improvement",
"label": "Areas for Improvement",
"guidance": "Identified procedural deficiencies, corrective action plans, owners, and due dates.",
"value": ""
},
"f12_Comments": {
"section": "Comments",
"label": "Comments",
"guidance": "Additional audit observations, limitations, or stakeholder commentary.",
"value": ""
}
}
}