Drawing on the experience of the pensions and other financial sectors, this paper examines what sort of risk-management framework pension funds should have in place. Such frameworks are broken down into four main categories: management oversight and culture; strategy and risk assessment; control systems; and information and reporting. Ways in which supervisory authorities can check that such systems are operating are also considered, with a check list provided to assist pension supervisory authorities with their oversight of this important area.