1. Industry-Specific Risk Considerations: Additional section for specialized industries such as financial services or healthcare with unique risk requirements

2. International Operations: Section addressing cross-border risk considerations for organizations with international operations

3. Technology Risk Assessment: Detailed section for organizations requiring specific focus on IT and digital risks

4. Environmental Risk Assessment: Section for organizations requiring specific environmental risk evaluation

5. Group Structure Assessment: For complex organizations with multiple subsidiaries or affiliated entities

6. Regulatory Compliance Framework: Detailed section for heavily regulated industries requiring specific compliance risk assessment

7. Crisis Management Assessment: Optional section focusing on emergency response and business continuity capabilities

1. Schedule A - Assessment Framework: Detailed methodology and criteria for risk maturity evaluation

2. Schedule B - Risk Categories Matrix: Comprehensive list of risk categories and their assessment parameters

3. Schedule C - Scoring Methodology: Detailed explanation of how risk maturity levels are scored and evaluated

4. Schedule D - Documentation Requirements: List of documents and evidence required for the assessment

5. Schedule E - Interview Schedule: Template for stakeholder interviews and assessment sessions

6. Appendix 1 - Risk Maturity Levels: Detailed descriptions of each maturity level and their characteristics

7. Appendix 2 - Reporting Templates: Standard templates for assessment reports and findings

8. Appendix 3 - Best Practice Framework: Reference framework of industry best practices and standards