---

Tasleemat Forms Guide

Project Artifact: Risk Audit

Document Reference: PMO-06.06

This document provides a comprehensive, professional reference to understand the purpose and effective usage of the Risk Audit in alignment with the Tasleemat framework.

---

1. What?

A structured audit report assessing compliance with risk processes and analyzing the efficacy of risk response strategies.

---

2. Why?

Ensures continuous improvement in risk identification and verifies that organizational risk policies are followed.

---

3. When?

Conducted periodically at designated milestones or upon major risk triggers during project execution.

---

4. Who?

Conducted by an independent Risk Auditor or PMO Lead and submitted to the Project Manager and Governance Board.

---

Tailoring Tips

• Scale audit depth based on project risk classification and regulatory compliance requirements.
• Focus on recurring operational risk patterns in iterative sprint retrospectives.

---

Alignment & Dependencies

1. Pre-requisites & Inputs (Upstream Dependencies)

• Mandatory:
  • Approved Baselines: Scope (PMO-04.02.05), Schedule (PMO-04.03.08), Cost (PMO-04.04.04)
  • Work Performance Data & Logs (PMO-05.01 – PMO-05.15)
• Optional / Contextual:
  • Risk Register (PMO-04.08.02)
  • Statement of Work (PMO-04.09.04)

2. Downstream Dependents

• Mandatory:
  • Change Request (PMO-05.03)
  • Project or Phase Closeout (PMO-07.03)
  • Lessons Learned Summary (PMO-07.01)
• Optional / Contextual:
  • Transition to Operations Checklist (PMO-07.04)
  • Value Realization Register (PMO-01.03)

---

5. How?

To accurately and professionally complete the Risk Audit, the responsible party must populate the following critical sections based on the project context (ensure parameters.md is referenced for global project variables):

• Audit Scope: The defined scope and boundaries of the risk audit.
• Period Covered: The timeframe examined by the risk audit.
• Level of Analysis: The organizational or WBS level examined during the audit.
• Reference Documents Reviewed: Key governance documents and logs reviewed during the audit.
• Audit Method: The methodology and evaluation techniques applied during the audit.
• Risk Event Audits: Evaluation of materialized risk events, root causes, response effectiveness, and foreseeability.
• Risk Response Audits: Detailed assessment of planned risk responses and their practical execution success.
• Process Compliance: Evaluation of organizational compliance with established PMBOK risk processes.
• Tools and Techniques: Assessment of the effectiveness of risk assessment tools and analytical models applied.
• Good Practices: Proven risk management practices and techniques recommended for broader adoption.
• Areas for Improvement: Identified procedural deficiencies, corrective action plans, owners, and due dates.
• Comments: Additional audit observations, limitations, or stakeholder commentary.

---

6. Reference Example

A fully completed, gold-standard reference example illustrating this artifact in practice is available:

📖 Completed Example: 06_06_Risk_Audit_Example.md