Risk management decisions and practices should be transparent
Risk management should include the identification and systematic documentation of all elements of the risk management process including decision-making, so that the rationale is transparent to all interested parties.