摘要:The significance of organisational risk management has grown ostensibly during recent decades, and this is true regarding for-profit organisations and public entities alike. There are, however, unique traits that characterise risk analysis and risk management as applied in the public sector, both in terms of areas of application and execution. Being mandatory is the foremost feature of risk management as applied in the public sector, with efforts to minimise risk, and the promotion of compliant operation and financial management serving as the goal. A conclusion that can be drawn from the State Audit Office’s audit and research experience is that even though internal controls are usually developed for risk management in organisations belonging to the central and local government subsystems of public finances, the conscious management of risks is not implemented. Organisations are yet in the learning phase of how to integrate risk management with organisational operations.