Risk registry
A risk that is not recorded cannot be reduced. The registry collects the company’s compliance, corruption, personnel, counterparty and other risks, assesses them on a matrix and shows what has been done to reduce them. If a risk materializes, the actual consequences are recorded.
Plan Compliance contour module, Enterprise plan.
What is inside
- Categories: compliance, corruption, fraud, legal, financial, operational
- Reputational, information security, personnel, counterparties
- Probability and impact matrix: initial and current assessment side by side
- Reassessment, acceptance and closing of a risk with history
- Mitigation measures with owners and due dates
- Tracking a realized risk: actual damage against the forecast
Boundaries
The risk registry is kept by the security service or compliance. Financial and legal risks can also be kept by other A3 products with separation by owner.
Frequent questions
Why record a realized risk?
To compare the actual damage with the forecast and revise the assessment. Without this, the risk registry stays a declaration.
Are risks linked to the knowledge base?
Yes. An article on a fraud scheme links to a risk, an incident or an anomaly, so the base grows from your own practice.
Other features
Shall we bring order to your checks?
We will show the dossier, a check, a verdict and monitoring on a demo environment, review your regulations and calculate a pricing plan for your actual volume.