Before you read on, what do you think the title refers to?
The answer is Business Risks.
The FCA has been highlighting this issue in workshops. They expect firms to ‘Identify, Assess & Manage’ risks and to be able to provide documentary proof that they are so doing.
They expect firms to have at least a Business Risk Management plan and ideally a Risk Register where known risks are recorded, along with proof that senior management have assessed the risks and planned mitigation strategies.