Hi I want to use GRC to manage KRIs and metrics and struggling to work out how to set it up properly.
I have multiple risks and each risk has one or more KRIs against it. Each year we capture data for those KRIs and we identify the trend (improving, deteriorating or neutral). We also report on the risk appetite tolerance - is it within tolerance, outside of tolerance or within short term tolerance.
I am confident I should be using Metric Definitions but I can't work out how to put the tolerances in the for each KRI so that the system tells us when if it's within or out of tolerance and also show the trend over each period. I want to be able to set it up and have the system send it to the risk owner each reporting period so they can update their data and we can report on the trend and tolerance rating
Can someone please point me in the right direction or share some learning links with me - I'm struggling to find sufficient information to help me progress.
