1. Overview

The system provides a range of standard reports which allows you to filter and generate reports on risks and risk actions in your system.

Reports can be accessed from the Navigation Menu under Reports > Risk Reports.

Figure 1.1

Note: Risk Reports can be accessed from the left-hand navigation panel too.

Figure 1.2

Once the report has loaded in the SSRS viewer, it is up to you on whether you want to export the report to Microsoft Word (editable) or PDF (View) or Excel (Editable).

When clicking on any of the report icons, you will select the filters available (if applicable) and then click on the preview icon to load the report.

Select the export icon to choose your selection:

Note: some reports are developed specifically for an excel export (mainly the risk register reports), and some reports are better viewed with PDF (generally all other standard reports).

When exporting to MS Word, there may be some formatting limitations that will occur. CAMMS can look at these if required. There is no guarantee that all formatting issues can be resolved at CAMMS end. However, we can highlight these to Microsoft.

Risk Reports – CAMMS Standard

Full Risk Register – CAMMS Standard
Simple Risk Register Report – CAMMS Standard/Other Risk Reports
Individual Risk Report – CAMMS Standard
Operational Risk Report – CAMMS Standard
Project Risk Report – CAMMS Standard
Strategic Risk Report – CAMMS Standard
Risk Action Summary Report – CAMMS Standard
Risk Executive Report – CAMMS Standard
Risk Professional System Administration Report – CAMMS Standard
Risk Status Report – CAMMS Standard
Risk Action Status Report – CAMMS Standard
Risk Action Report – CAMMS Standard

Administration Reports (Stand Alone Only) click here to view Admin Reports

Organisation View – CAMMS Standard
Organisational List – CAMMS Standard
Staff List – CAMMS Standard
User Overview – CAMMS Standard

2. Full Risk Register Report (Standard)

This report contains a full export of the risks, mitigations and descriptions of the risk criteria used.

Please note – whilst this report can be downloaded in a variety of formats, because of the unique formatting this report has, MS Excel is the most appropriate medium for report presentation. The report format and columns can then be manipulated to suit. If generated in PDF for example, screen views may be restrictive due to the size and format of the report.

FILTERS

FILTERS
Filter	Description
Risk Type	Dropdown allows users to choose the type of risk (Default to 'Show All').
Directorate	Dropdown allows users to choose the Directorate (Default to 'Show All').
Business Unit	Dropdown allows the users to choose the Business Unit (Default to 'Show All').
Risk Category	Dropdown allows the users to choose a Risk Category (Default to 'Show All').
Responsible Officer	Dropdown allows the users to choose the Responsible Officer (Default to 'Show All').
Risk Treatment	Dropdown allows the users to choose the Risk Treatment (Default to 'Show All').
Sort Risk First Priority	Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the First sorting priority (Default is set to 'Current Risk Rating').
Sort Risk Second Priority	Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the Second sorting priority (Default is set to 'Initial Risk Rating').
Sort Risk Third Priority	Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the Third sorting priority (Default is set to 'Risk Code').
Risk Status	Dropdown allows the users to choose the status of the Risk (Default is set to 'Active').
Business Process	Dropdown allows the users to choose the Business Process which is applied to the Risk (Default is set to 'Show All'). Only Applicable if you utilise these fields.
Legislation	Dropdown allows the users to choose the legislation which is applied to the Risk (Default is set to 'Show All'). Only Applicable if you utilise these fields.
Action	Allows you to filter the Project Risks by the specific Action (Default to 'Show All').

REPORT DETAILS

REPORT DETAILS
Report Element	Description
Reference Number	Displays the Risk Code.
Risk Title	Displays the Risk Title.
Primary Category/Subcategory	Displays the Primary Category followed by the Subcategory.
Secondary Categories	Displays the Secondary Categories.
Risk Type	Displays the Risk Type.
Risk Identification
Risk Title	Displays the Risk Title.
Causes	Displays the Causes for the three assessments - Initial, Current and Future.
Consequences	Displays the Consequences for the three assessments - Initial, Current and Future.
Existing controls	Displays the Existing Controls for the three assessments - Initial, Current and Future.
Evaluation
Effectiveness of Controls	Displays the effectiveness for the three assessments.
Risk Treatment	Displays the Risk Treatment for the three assessments.
Initial Risk Assessment Rating
Consequences	Displays the rating for the consequences.
Likelihood	Displays the rating for the Likelihood.
Risk Rating Score	Displays the Initial Risk Rating Score.
Risk Rating	Displays the overall Risk Rating image.

Excel Export:

3. Simple Risk Register (Standard)

This Report contains an export of the risks and a highlight of its related details.

Please note – whilst this report can be downloaded in a variety of formats, because of the unique formatting this report has, MS Excel is the most appropriate medium for report presentation. The report format and columns can then be manipulated to suit. If generated in PDF for example, screen views may be restrictive due to the size and format of the report.

FILTERS

FILTERS
Filter	Description
Risk Type	Dropdown allows the users to choose the type of risk (Default to 'Show All').
Directorate	Dropdown allows the users to choose the Directorate (Default to 'Show All').
Business Unit	Dropdown allows the users to choose the Business Unit (Default to 'Show All'). Note: If 'Strategic Risk' is selected for Risk type, selecting 'Directorate’ or 'Business Unit’ will display a blank report. This is due to strategic risks not having these links.
Risk Category	Dropdown allows users to choose the Risk Category (Default to 'Show All').
Responsible Officer	Dropdown allows the users to choose the Responsible Officer (Default to 'Show All').
Risk Treatment	Dropdown allows the users to choose the Risk Treatment (Default to 'Show All').
Sort Risk First Priority	Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the First sorting priority (Default is set to 'Current Risk Rating').
Sort Risk Second Priority	Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the Second sorting priority (Default is set to 'Initial Risk Rating').
Sort Risk Third Priority	Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the Third sorting priority (Default is set to 'Risk Code').
Risk Status	Dropdown allows the users to choose the status of the Risk (Default is set to 'Active').
Business Process	Dropdown allows the users to choose the Business Process which is applied to the Risk (Default is set to 'Show All'). Only Applicable if you have these fields enabled.
Legislation	Dropdown allows the users to choose the legislation which is applied to the Risk (Default is set to 'Show All'). Only Applicable if you have these fields enabled.
Project	Allows you to filter the Project Risks by the specific Project (Default to 'Show All').

REPORT DETAILS

REPORT DETAILS
Report Element	Description
Risk Code	Displays the Risk Code.
Risk Description	Displays the Risk Description.
Causes - Initial	Displays the Causes through the Initial state.
Risk Action	Displays the Risk Actions against the Risk.
Primary Category/Subcategory	Displays the Primary and Subcategories.
Secondary Categories	Displays the Secondary Categories.
Responsible Person	Displays the Responsible Person name.
Secondary Responsible Persons	Displays the Secondary Responsible Person name.
Business Unit	Displays the Business Unit that the risk is linked to (Operational risks only).
Initial
Consequence	Displays the Consequence description for the initial assessment.
Likelihood	Displays the Likelihood description for the initial assessment.
Risk Rating	Displays the Risk Rating in the Initial assessment. The cell will be coloured based on the risk rating.
Current
Consequence	Displays the Consequence description for the current assessment.
Effectiveness of Controls	Displays the Effectiveness of controls description.
Likelihood	Displays the Likelihood description for the current assessment.
Risk Rating	Displays the Risk Rating in the Current assessment. The cell will be coloured based on the risk rating.
Future
Consequence	Displays the Consequence description for the Future assessment.
Likelihood	Displays the Likelihood description for the Future assessment.
Risk Rating	Displays the Risk Rating in the Future assessment. The cell will be coloured based on the risk rating.

Report output example:

4. Individual Risk Report (Standard)

This Report contains the details of each risks including the relevant risk actions and linked controls.

FILTERS

FILTERS
Filter	Description
Risk Type	Dropdown allows users to choose the type of risk (Default to 'Show All').
Directorate	Dropdown allows users to choose the Directorate (Default to 'Show All').
Business Unit	Dropdown allows users to choose the Business Unit (Default to 'Show All').
Risk Rating Initial	This will allow users to choose the Initial rating for the Risk (Default to 'Show All').
Risk Rating Current	This will allow users to choose the Current rating for the Risk (Default to 'Show All').
Risk Rating Future	This will allow users to choose the Future rating for the Risk (Default to 'Show All').
Risk Category	Dropdown allows users to choose the Risk Category (Default to 'Show All').
Responsible Officer	Dropdown allows users to choose the Responsible Officer (Default to 'Show All').
Risk Treatment	Dropdown allows users to choose the Risk Treatment (Default to 'Show All').
Sort Risk First Priority	Dropdown allows users to sort the Priorities accordingly. This allows the user to define the First sorting priority (Default is set to 'Current Risk Rating').
Sort Risk Second Priority	Dropdown allows users to sort the Priorities accordingly. This allows the user to define the Second sorting priority (Default is set to 'Initial Risk Rating').
Sort Risk Third Priority	Dropdown allows users to sort the Priorities accordingly. This allows the user to define the Third sorting priority (Default is set to 'Risk Code').
Risk Status	Dropdown allows users to choose the status of the Risk (Default is set to 'Active').
Business Process	Dropdown allows users to choose the Business Process which is applied to the Risk (Default is set to 'Show All'). This is only applicable if these fields are enabled.
Legislation	Dropdown allows users to choose the legislation which is applied to the Risk (Default is set to 'Show All'). This is only applicable if these fields are enabled.
Risk Level	Dropdown will display the three assessment phases (Initial, Current and Future).
Date Selection (Date TO and FROM)	This will allow users to filter out the risks based on risk review dates.
Action	Allows you to filter the Project Risks by the specific Action (Default to 'Show All').

REPORT DETAILS

REPORT DETAILS
Report Element	Description
Cover Page	Cover page displaying the report title, client logo.
Risk Details
Reference Number	Displays the Risk Code.
Risk Title	Displays the Risk Title.
Risk Rating	Displays the Risk Rating colour and description.
Primary Category	Displays the Primary category of the report.
Primary Subcategory	Displays the Primary Subcategory of the report.
Secondary Categories	Displays the Secondary Categories of the report.
Responsible Officer	Displays the Responsible officer.
Secondary Responsible Officers	Displays the Secondary Responsible Officers.
Risk Identification
Initial	Displays Likelihood, Consequence and Risk Rating for the Initial assessment.
Current	Displays likelihood, Consequence, Effectiveness of Controls and Risk Rating for the Current assessment.
Future	Displays likelihood, Consequence and Risk Rating for the Future assessment.
Causes	Displays the causes of the Risk from the text field within the initial assessment.
Consequences	Displays the consequences of the Risk from the text field within the initial assessment.
Risk Controls	Displays the Risk Control titles and descriptions.
Solutions	Displays the Risk actions (Risk Action, Risk Control Linked item (if applicable), Action Status, End Date, Progress Comments and Responsible Officer).

Report output example:

5. Operational Risk Report (Standard)

The Operational Risk report shows all Operational Risks. It displays all data which contributes to the setup of the risk, as well as the Initial, Current and Future rating and the risk progress.

FILTERS

FILTERS
Filter	Description
Directorate	Dropdown allows selection of Directorate. 'Show All' is selected by default.
Business Unit	Dropdown allows selection of Business Unit. If a directorate was selected above, the pages refreshes and this filter only shows the Business Units within that directorate. 'Show All' is selected by default.
Risk Rating Initial	Dropdown allows selection of a Risk Rating for the Initial phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.
Risk Rating Current	Dropdown allows selection of a Risk Rating for the Current phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.
Risk Rating Future	Dropdown allows selection of a Risk Rating for the Future phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.
Risk Category	Dropdown allows selection of a Risk Category (defined in Risk Settings > Categories). 'Show All' is selected by default.
Responsible Officer	Dropdown allows selection of a Staff member (defined in Framework > Staff). 'Show All' is selected by default.
Include Secondary Responsible Person	If ticked, chooses the risk records where selected staff member is primary OR secondary responsible person for. This is un-ticked by default.
Show Risk Solution and Business Planning details	If ticked, includes additional Risk Solution (risk action) and Business Planning details. This is ticked by default.
Show Solution Summary only	If ticked, only the Risk Solution (without details) will be shown in the relevant area. This is ticked by default.
Risk Treatment	Dropdown allows selection of a Risk Treatment (defined in Risk Settings > Risk Treatment). 'Show All' is selected by default.
Order By	Dropdown allows selecting a sorting mechanism for the records in the report to be listed down. Alphabetical order by Risk Name, By Risk Code and by Risk Rating (Initial, Current or Future) are some of the given options. 'Alphabetical order by Risk Name' is selected by default.
Risk Status	Dropdown allows selection of a Risk Status, to be chosen from whether that Risk is 'Active' or 'Inactive'.
Business Process	Dropdown allows selection of a Business Process (defined in Risk Settings > Advanced Settings > Business Process). 'Show All' is selected by default.
Legislation	Dropdown allows selection of a Legislation (defined in Risk Settings > Advanced Settings > Legislation). 'Show All' is selected by default.

REPORT DETAILS

REPORT DETAILS
Report Element	Description
Directorate	Name of the Directorate selected by user.
Business Unit	Name of the Business Unit selected by the user.
Reference Number	Unique number for each risk. Reference Code is given at the Risk creation.
Risk	Risk name. This is mentioned at the Risk creation.
Responsible Officer	Responsible Officer allocated for the Risk.
Secondary Responsible Officer(s)	Secondary Responsible Officers allocated for the Risk.
Risk Category	Risk categories (primary category listed first and then secondary categories if relevant). Selected at the Risk creation.
Review Frequency	Risk review frequency (i.e., annual, monthly etc.) Data drawn from the chosen Review Frequency at Operational Risk > Risk Review area. Different Review Frequencies are defined at Risk Settings > Advanced Settings > Review Frequency area.
Assessment phases for a Risk. Under each phase there are sub-sections such as assessment, solution and treatment. Each sub-section also contains Risk attributes.
Initial Assessment Current Assessment Future Assessment	Assessment phases
	Likelihood	Risk likelihood identified in Initial phase
	Consequence	Risk consequence (identified via Consequence Reference Grid)
	Effectiveness of Controls	Effectiveness of Controls identified in Initial phase
	Custom Criteria	Client defined criteria
	Last Modified Date	Date Initial risk assessment last saved. Will appear as N/A if no date available (possible if data was migrated)
	Risk Rating	Initial risk assessment rating (as per the calculation defined in Risk Calculation Settings)
	Causes	Causes identified during Initial phase
	Consequences	Consequences identified during Initial phase
	Existing Controls	Existing Controls identified during Initial phase
	Future Controls	Future Controls identified during Initial phase
	Treatment (s)	Treatments identified in Initial phase
	Risk Solution Related Fields. ‘Show Risk Solution and Business Planning details’ tick box must be ticked to display these. Separated by a dashed line break.	Name of Risk Solution
	Solution	Name of Risk Solution
	Responsible Officer*	Responsible Officer for the solution
	Reporting Frequency*	Risk solution reporting frequency i.e., annual, monthly etc.
	Status*	Status of Solution (i.e., In Progress, Completed)
	Due Date / Completed Date*	Due Date and Completed Date of Risk Action. Will appear as N/A if date is not mentioned.
	% Complete*	Percentage complete of risk solution
	Progress Comment*	Last Progress Comment for risk solution
	Resource Requirement*	Resource Requirement for Risk solution
	Business Plans connected fields. ‘Show Risk Solution and Business Planning details’ tick box should be ticked to display these. Separated by a dashed line break.	All Goals linked to this Risk are listed if “Link Risks to hierarchy” parameter on.
	Related Goals*
	Related Outcomes (Risk Solutions) *	All Outcomes linked to this Risk’s Solutions are listed
	Related Actions*	All Actions linked to this Risk are listed if “Link Risks to hierarchy” parameter on.
	Related Tasks*	All Tasks linked to this Risk are listed if “Link Risks to hierarchy” parameter on.
	Related Tasks (Risk Solutions) *	All Tasks linked to this Risk’s Solutions are listed
	Business Process	Related Business Processes.
	Legislation	Related Legislation.

6. Project Risk Report - Standard

This report shows all Project related Risks. It displays all data which contributes to the setup of the risk, as well as the Initial, Current and Future rating and the risk progress.

FILTERS

FILTERS
Filter	Description
Directorate	Dropdown allows selection of Directorate.
Business Unit	Dropdown allows selection of Business Unit. If an Directorate was selected above, the pages refreshes and this filter only shows the within that Directorate. 'Show All' is selected by default.
Risk Rating Initial	Dropdown allows selection of a Risk Rating for the Initial phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.
Risk Rating Current	Dropdown allows selection of a Risk Rating for the Current phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.
Risk Rating Future	Dropdown allows selection of a Risk Rating for the Future phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.
Risk Category	Dropdown allows selection of a risk category (defined in Risk Settings > Categories). 'Show All' is selected by default.
Responsible Officer	Dropdown allows selection of a Staff member (defined in Framework > Staff). 'Show All' is selected by default.
Include Secondary Responsible Person	If ticked, chooses the risk records where selected staff member is primary OR secondary responsible person for. This is un-ticked by default.
Show Risk Solution and Business Planning details	If ticked, includes additional Risk Solution and Business Planning details. This is ticked by default.
Show Solution Summary only	If ticked, only the Risk Solution (without details) will be shown in the relevant area. This is ticked by default.
Risk Treatment	Dropdown allows selection of a Risk Treatment (defined in Risk Settings > Risk Treatment). 'Show All' is selected by default.
Order By	Dropdown allows selecting a sorting mechanism for the records in the report to be listed down. Alphabetical order by Risk Name, By Risk Code and by Risk Rating (Initial, Current or Future) are some of the given options. 'Alphabetical order by Risk Name' is selected by default.
Risk Status	Dropdown allows selection of a Risk Status, to be chosen from whether that Risk is 'Active' or 'Inactive'.
Business Process	Dropdown allows selection of a Business Process (defined in Risk Settings > Advanced Settings > Business Process). 'Show All' is selected by default.
Legislation	Dropdown allows selection of a Legislation (defined in Risk Settings > Advanced Settings > Legislation). 'Show All' is selected by default.
Project	Dropdown allows selection of a Name of the Project that a project risk has been created for. 'Show All' is selected by default.

REPORT DETAILS
Report Element	Description
Directorate	Name of the Directorate selected by user.
Business Unit	Name of the Business Unit selected by the user.
Project	Name of the Project that Risk has been created for.
Risk Code	Unique code for each risk. Risk Code is given at the Risk creation.
Risk	Risk name.
Responsible Officer	Responsible Officer allocated for the Risk.
Secondary Responsible Officer (s)	Secondary Responsible Officers allocated for the Risk.
Risk Category	Risk categories (primary category listed first and then secondary categories if relevant). Selected at the Risk creation.
Review Frequency	Risk review frequency (i.e., annual, monthly etc.) Data drawn from the chosen Review Frequency at Operational Risk > Risk Review area. Different Review Frequencies are defined at Risk Settings > Advanced Settings > Review Frequency area.
Assessment phases for a Risk. Under each phase there are sub-sections such as assessment, solution and treatment. Each sub-section also contains Risk attributes.
Initial Assessment Current Assessment Future Assessment	Assessment phases
	Likelihood	Risk likelihood identified in Initial phase
	Consequence	Risk consequence (identified via Consequence Reference Grid)
	Effectiveness of Controls	Effectiveness of Controls identified in Initial phase
	Custom Criteria	Client defined criteria
	Last Modified Date	Date Initial risk assessment last saved. Will appear as N/A if no date available (possible if data was migrated)
	Risk Rating	Initial risk assessment rating (as per the calculation defined in Risk Calculation Settings)
	Causes	Causes identified during Initial phase
	Consequences	Consequences identified during Initial phase
	Existing Controls	Existing Controls identified during Initial phase
	Future Controls	Future Controls identified during Initial phase
	Treatment(s)	Treatments identified in Initial phase
	Risk Solution Related Fields. ‘Show Risk Solution and Business Planning details’ tick box must be ticked to display these.
	Solution	Name of Risk Solution
	Responsible Officer*	Responsible Officer for the solution
	Reporting Frequency*	Risk solution reporting frequency i.e., annual, monthly etc.
	Status*	Status of Solution (i.e., In Progress, Completed)
	Due Date / Completed Date*	Due Date and Completed Date of Risk Action. Will appear as N/A if date is not mentioned.
	% Complete*	Percentage complete of risk solution
	Progress Comment*	Last Progress Comment for risk solution
	Resource Requirement*	Resource Requirement for Risk solution
	Business Plans con