---
title: "HMT Orange Book — Management of Risk — KYE Protocol™ coverage"
description: "HMT Orange Book — Management of Risk coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it."
url: https://kyeprotocol.com/compliance/uk-orange-book/
lang: en
source: "KYE Protocol"
---

> HMT Orange Book — Management of Risk coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.

HMT Orange Book — Management of Risk

# HMT Orange Book — Management of Risk — 83% of in-scope requirements covered.

3 requirements · 3 in scope (2 enforced · 1 designed). The 83% is weighted over the in-scope base.

**Source:** HM Treasury — 'The Orange Book: Management of Risk — Principles and Concepts' (2023) and the Portfolio Risk Management Guidance. The cross-government standard for risk management in public-sector bodies; this registry maps the identify / assess / monitor / report risk-management cycle to KYE™ runtime artefacts for AI-assisted public-sector actions. · **License:** Open Government Licence v3.0

## By category

| Category | Reqs | Enforced | Designed | Advisory | Deferred | Coverage |
| --- | --- | --- | --- | --- | --- | --- |
| Risk identification & assessment | 1 | 1 | 0 | 0 | 0 | **100%** |
| Risk monitoring | 1 | 1 | 0 | 0 | 0 | **100%** |
| Risk reporting & governance | 1 | 0 | 1 | 0 | 0 | **50%** |

## Every requirement → the KYE™ artefact that enforces it

| ID | Title | Status | KYE™ enforcement |
| --- | --- | --- | --- |
| `uk-orange-book.identify-assess` | Identify and assess risk before a decision proceeds (risk appetite and assessment recorded) | enforced | **audit\_events**: `kye.risk.score.v1`, `kye.purpose.grant.v1`, `kye.evidence.decision_map.v1` **engines**: `internal`, `internal` **rule\_packs**: `kye:rule-pack:public-sector-governance` **dictionaries**: `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md` |
| `uk-orange-book.monitor` | Monitor risk continuously and respond to change (drift, emerging risk, control effectiveness) | enforced | **audit\_events**: `kye.signal.drift.detected.v1`, `kye.resilience.improvement_record.v1` **engines**: `internal` **rule\_packs**: `kye:rule-pack:public-sector-governance` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md` |
| `uk-orange-book.report-govern` | Report risk to the accountable governance body and escalate (portfolio risk reporting) | designed | **audit\_events**: `kye.risk.authority_register.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **rule\_packs**: `kye:rule-pack:public-sector-governance` **constitution\_refs**: `constitution/36-GOVERNEDUI.md` |

Canonical KYE™ surfaces referenced on this page: [KYE Protocol™](https://kyeprotocol.com/).