Operational Risk Management dashboard
The Operational Risk Management dashboard enables an entity owner, with the role sn_risk.user, to view the complete risk posture for the enterprise in a single consolidated report. This dashboard makes it easy to analyze the risk posture efficiently and take necessary corrective actions to ensure that there are no losses.
If you are on Vancouver or Washington DC, you can view the dashboard in the Next Experience UI Framework.
To open the dashboard, navigate to .
End user and roles
| End user and goal | Required role | Benefits |
|---|---|---|
| Risk user: Operational risk captures business continuity plans, environmental risk, process systems, operations risk, and people-related risks. | sn_risk.user |
|
- Risk identification and assessment
- Risk events data
- Identifying and assessing internal controls
- Monitoring and reporting of risks
Indicators
Indicators define a performance measurement taken at regular intervals of a business service, an activity, or organizational behavior. These performance measurements result in a series of indicator scores over time. To view this dashboard, users must have Advanced Risk and Policy and Compliance Management plugins activated
- GRC Advanced Risk plugin indicators
- GRC Policy and Compliance Management plugin indicators
- GRC Audit Management plugin indicators
- GRC Risk Management plugin Performance Analytics indicators
- GRC Profiles plugin indicators
- Daily Data Collector job: This job is used to collect data for the Indicators. This jobs runs daily. To run this job, you must fill the Run as field with an appropriate value. This job is preconfigured.
- Historical Data Collector job: This job is used to collect data over a period of time. This job is generally preconfigured with the demo data. Therefore, if you enable demo data, while activating the plugin, then you can view this job. To run this job, you must fill the Run as field with an appropriate value.
Breakdowns
Organization (Entity)
Data visualizations
| Title | Description |
|---|---|
| Risk Response by Residual Risk Rating | Heatmap which shows the number of different risk response tasks for each residual risks. |
| Controls by owner | Controls distributed on the basis of their owners. |
| Risks by owner | Risks distributed on the basis of their owners. |
| Inherent risks by category | Number of risk assessments with different inherent risk levels grouped by risk statement categories such as credit, market and so on. |
| Residual risks by category | Number of risk assessments with different residual risk levels grouped by risk statement categories such as credit, market, and so on. |
| Control Test | List of all controls. |
| Control Indicators | Indicators associated with each control. |
| Risk Indicators | Indicators associated with each risk. |
| Controls by classifications | Controls distribution on the basis of its classification like preventive or detective. |
| Controls by attestation frequency | Controls distributed on the basis of attestation frequency. |
| Risks by category | Risk distribution on the basis of category. |
| Overdue issues | Number of open issues that are past their planned end date. |
| Active risk events | Number of active risk events. |
| Pending attestations | Number of controls awaiting attestation. |
| Overdue assessment task | Number of risk assessments with the substate as Overdue. |
| Upcoming acceptance expiry | Number of risk acceptance tasks with acceptance end date in next 10 days. |
| Open mitigation tasks | Number of open mitigation tasks. |
| Open indicator tasks | Number of open indicator tasks. |
| Overdue control tests | Number of open control tests that are past their planned end date. |