HMT Orange Book — Management of Risk

HMT Orange Book — Management of Risk — 83% of in-scope requirements covered.

3 requirements · 3 in scope (2 enforced · 1 designed). The 83% is weighted over the in-scope base.

HMT Orange Book: requirement → the KYE™ artefact that enforces it

Demo data

You learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.

  1. identify-assess · enforced

    Identify and assess risk before a decision proceeds (risk appetite and assessment recorded)

    Audit events: kye.risk.score.v1, kye.purpose.grant.v1, kye.evidence.decision_map.v1 · Rule packs: kye:rule-pack:public-sector-governance · Constitution: 12 purpose permission

  2. monitor · enforced

    Monitor risk continuously and respond to change (drift, emerging risk, control effectiveness)

    Audit events: kye.signal.drift.detected.v1, kye.resilience.improvement_record.v1 · Rule packs: kye:rule-pack:public-sector-governance · Constitution: 13 resilience loop

  3. report-govern · designed

    Report risk to the accountable governance body and escalate (portfolio risk reporting)

    Audit events: kye.risk.authority_register.v1, kye.compliance.attestation.v1 · Rule packs: kye:rule-pack:public-sector-governance · Constitution: 36 governedui

How this widget is built
Demonstrates
KYE™ Compliance Mapping Rail™
Components
  • Framework requirement (clause)
  • Coverage status
  • KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
Flow
Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
Used on

Source: HM Treasury — 'The Orange Book: Management of Risk — Principles and Concepts' (2023) and the Portfolio Risk Management Guidance. The cross-government standard for risk management in public-sector bodies; this registry maps the identify / assess / monitor / report risk-management cycle to KYE™ runtime artefacts for AI-assisted public-sector actions. · License: Open Government Licence v3.0

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
Risk identification & assessment11000100%
Risk monitoring11000100%
Risk reporting & governance1010050%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
uk-orange-book.identify-assessIdentify and assess risk before a decision proceeds (risk appetite and assessment recorded)enforcedaudit_events: kye.risk.score.v1, kye.purpose.grant.v1, kye.evidence.decision_map.v1
engines: internal, internal
rule_packs: kye:rule-pack:public-sector-governance
dictionaries: internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
uk-orange-book.monitorMonitor risk continuously and respond to change (drift, emerging risk, control effectiveness)enforcedaudit_events: kye.signal.drift.detected.v1, kye.resilience.improvement_record.v1
engines: internal
rule_packs: kye:rule-pack:public-sector-governance
constitution_refs: constitution/13-RESILIENCE-LOOP.md
uk-orange-book.report-governReport risk to the accountable governance body and escalate (portfolio risk reporting)designedaudit_events: kye.risk.authority_register.v1, kye.compliance.attestation.v1
engines: internal
rule_packs: kye:rule-pack:public-sector-governance
constitution_refs: constitution/36-GOVERNEDUI.md

Canonical KYE™ surfaces referenced on this page: KYE Protocol™.