HMT Orange Book — Management of Risk · v2023 (Management of Risk) +…

HMT Orange Book — Management of Risk

HMT Orange Book — Management of Risk — 83% of in-scope requirements covered.

3 requirements · 3 in scope (2 enforced · 1 designed). The 83% is weighted over the in-scope base.

Source: HM Treasury — 'The Orange Book: Management of Risk — Principles and Concepts' (2023) and the Portfolio Risk Management Guidance. The cross-government standard for risk management in public-sector bodies; this registry maps the identify / assess / monitor / report risk-management cycle to KYE™ runtime artefacts for AI-assisted public-sector actions. · License: Open Government Licence v3.0

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
Risk identification & assessment 1 1 0 0 0 100%
Risk monitoring 1 1 0 0 0 100%
Risk reporting & governance 1 0 1 0 0 50%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
uk-orange-book.identify-assess Identify and assess risk before a decision proceeds (risk appetite and assessment recorded) enforced audit_events: kye.risk.score.v1, kye.purpose.grant.v1, kye.evidence.decision_map.v1
engines: internal, internal
rule_packs: kye:rule-pack:public-sector-governance
dictionaries: internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
uk-orange-book.monitor Monitor risk continuously and respond to change (drift, emerging risk, control effectiveness) enforced audit_events: kye.signal.drift.detected.v1, kye.resilience.improvement_record.v1
engines: internal
rule_packs: kye:rule-pack:public-sector-governance
constitution_refs: constitution/13-RESILIENCE-LOOP.md
uk-orange-book.report-govern Report risk to the accountable governance body and escalate (portfolio risk reporting) designed audit_events: kye.risk.authority_register.v1, kye.compliance.attestation.v1
engines: internal
rule_packs: kye:rule-pack:public-sector-governance
constitution_refs: constitution/36-GOVERNEDUI.md