Risk Reports

1. Overview

The system provides a range of standard reports which allows you to filter and generate reports on risks and risk actions in your system.

Reports can be accessed from the Navigation Menu under Reports > Risk Reports.

Figure 1.1

Note: Risk Reports can be accessed from the left-hand navigation panel too.

Figure 1.2

Once the report has loaded in the SSRS viewer, it is up to you on whether you want to export the report to Microsoft Word (editable) or PDF (View) or Excel (Editable).

When clicking on any of the report icons, you will select the filters available (if applicable) and then click on the preview icon to load the report.

Select the export icon to choose your selection:

Note: some reports are developed specifically for an excel export (mainly the risk register reports), and some reports are better viewed with PDF (generally all other standard reports).

When exporting to MS Word, there may be some formatting limitations that will occur. CAMMS can look at these if required. There is no guarantee that all formatting issues can be resolved at CAMMS end. However, we can highlight these to Microsoft.

Risk Reports – CAMMS Standard

  1. Full Risk Register – CAMMS Standard

  2. Simple Risk Register Report – CAMMS Standard/Other Risk Reports

  3. Individual Risk Report – CAMMS Standard

  4. Operational Risk Report – CAMMS Standard

  5. Project Risk Report – CAMMS Standard

  6. Strategic Risk Report – CAMMS Standard

  7. Risk Action Summary Report – CAMMS Standard

  8. Risk Executive Report – CAMMS Standard

  9. Risk Professional System Administration Report – CAMMS Standard

  10. Risk Status Report – CAMMS Standard

  11. Risk Action Status Report – CAMMS Standard

  12. Risk Action Report – CAMMS Standard

Administration Reports (Stand Alone Only) click here to view Admin Reports

  • Organisation View – CAMMS Standard

  • Organisational List – CAMMS Standard

  • Staff List – CAMMS Standard

  • User Overview – CAMMS Standard

2. Full Risk Register Report (Standard)

This report contains a full export of the risks, mitigations and descriptions of the risk criteria used.

Please note – whilst this report can be downloaded in a variety of formats, because of the unique formatting this report has, MS Excel is the most appropriate medium for report presentation. The report format and columns can then be manipulated to suit. If generated in PDF for example, screen views may be restrictive due to the size and format of the report.

FILTERS

FILTERS

Filter

Description

Risk Type

Dropdown allows users to choose the type of risk (Default to 'Show All').

Directorate

Dropdown allows users to choose the Directorate (Default to 'Show All').

Business Unit

Dropdown allows the users to choose the Business Unit (Default to 'Show All').

Risk Category

Dropdown allows the users to choose a Risk Category (Default to 'Show All').

Responsible Officer

Dropdown allows the users to choose the Responsible Officer (Default to 'Show All').

Risk Treatment

Dropdown allows the users to choose the Risk Treatment (Default to 'Show All').

Sort Risk First Priority

Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the First sorting priority (Default is set to 'Current Risk Rating').

Sort Risk Second Priority

Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the Second sorting priority (Default is set to 'Initial Risk Rating').

Sort Risk Third Priority

Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the Third sorting priority (Default is set to 'Risk Code').

Risk Status

Dropdown allows the users to choose the status of the Risk (Default is set to 'Active').

Business Process

Dropdown allows the users to choose the Business Process which is applied to the Risk (Default is set to 'Show All'). Only Applicable if you utilise these fields.

Legislation

Dropdown allows the users to choose the legislation which is applied to the Risk (Default is set to 'Show All'). Only Applicable if you utilise these fields.

Action

Allows you to filter the Project Risks by the specific Action (Default to 'Show All').

REPORT DETAILS

REPORT DETAILS

Report Element

Description

Reference Number

Displays the Risk Code.

Risk Title

Displays the Risk Title.

Primary Category/Subcategory

Displays the Primary Category followed by the Subcategory.

Secondary Categories

Displays the Secondary Categories.

Risk Type

Displays the Risk Type.

Risk Identification

Risk Title

Displays the Risk Title.

Causes

Displays the Causes for the three assessments - Initial, Current and Future.

Consequences

Displays the Consequences for the three assessments - Initial, Current and Future.

Existing controls

Displays the Existing Controls for the three assessments - Initial, Current and Future.

Evaluation

Effectiveness of Controls

Displays the effectiveness for the three assessments.

Risk Treatment

Displays the Risk Treatment for the three assessments.

Initial Risk Assessment Rating

Consequences

Displays the rating for the consequences.

Likelihood

Displays the rating for the Likelihood.

Risk Rating Score

Displays the Initial Risk Rating Score.

Risk Rating

Displays the overall Risk Rating image.

Excel Export:

3. Simple Risk Register (Standard)

This Report contains an export of the risks and a highlight of its related details.

Please note – whilst this report can be downloaded in a variety of formats, because of the unique formatting this report has, MS Excel is the most appropriate medium for report presentation. The report format and columns can then be manipulated to suit. If generated in PDF for example, screen views may be restrictive due to the size and format of the report.

FILTERS

FILTERS

Filter

Description

Risk Type

Dropdown allows the users to choose the type of risk (Default to 'Show All').

Directorate

Dropdown allows the users to choose the Directorate (Default to 'Show All').

Business Unit

Dropdown allows the users to choose the Business Unit (Default to 'Show All').

Note: If 'Strategic Risk' is selected for Risk type, selecting 'Directorate’ or 'Business Unit’ will display a blank report. This is due to strategic risks not having these links.

Risk Category

Dropdown allows users to choose the Risk Category (Default to 'Show All').

Responsible Officer

Dropdown allows the users to choose the Responsible Officer (Default to 'Show All').

Risk Treatment

Dropdown allows the users to choose the Risk Treatment (Default to 'Show All').

Sort Risk First Priority

Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the First sorting priority (Default is set to 'Current Risk Rating').

Sort Risk Second Priority

Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the Second sorting priority (Default is set to 'Initial Risk Rating').

Sort Risk Third Priority

Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the Third sorting priority (Default is set to 'Risk Code').

Risk Status

Dropdown allows the users to choose the status of the Risk (Default is set to 'Active').

Business Process

Dropdown allows the users to choose the Business Process which is applied to the Risk (Default is set to 'Show All'). Only Applicable if you have these fields enabled.

Legislation

Dropdown allows the users to choose the legislation which is applied to the Risk (Default is set to 'Show All'). Only Applicable if you have these fields enabled.

Project

Allows you to filter the Project Risks by the specific Project (Default to 'Show All').

REPORT DETAILS

REPORT DETAILS

Report Element

Description

Risk Code

Displays the Risk Code.

Risk Description

Displays the Risk Description.

Causes - Initial

Displays the Causes through the Initial state.

Risk Action

Displays the Risk Actions against the Risk.

Primary Category/Subcategory

Displays the Primary and Subcategories.

Secondary Categories

Displays the Secondary Categories.

Responsible Person

Displays the Responsible Person name.

Secondary Responsible Persons

Displays the Secondary Responsible Person name.

Business Unit

Displays the Business Unit that the risk is linked to (Operational risks only).

Initial

Consequence

Displays the Consequence description for the initial assessment.

Likelihood

Displays the Likelihood description for the initial assessment.

Risk Rating

Displays the Risk Rating in the Initial assessment. The cell will be coloured based on the risk rating.

Current

Consequence

Displays the Consequence description for the current assessment.

Effectiveness of Controls

Displays the Effectiveness of controls description.

Likelihood

Displays the Likelihood description for the current assessment.

Risk Rating

Displays the Risk Rating in the Current assessment. The cell will be coloured based on the risk rating.

Future

Consequence

Displays the Consequence description for the Future assessment.

Likelihood

Displays the Likelihood description for the Future assessment.

Risk Rating

Displays the Risk Rating in the Future assessment. The cell will be coloured based on the risk rating.

Report output example:

4. Individual Risk Report (Standard)

This Report contains the details of each risks including the relevant risk actions and linked controls.

FILTERS

FILTERS

Filter

Description

Risk Type

Dropdown allows users to choose the type of risk (Default to 'Show All').

Directorate

Dropdown allows users to choose the Directorate (Default to 'Show All').

Business Unit

Dropdown allows users to choose the Business Unit (Default to 'Show All').

Risk Rating Initial

This will allow users to choose the Initial rating for the Risk (Default to 'Show All').

Risk Rating Current

This will allow users to choose the Current rating for the Risk (Default to 'Show All').

Risk Rating Future

This will allow users to choose the Future rating for the Risk (Default to 'Show All').

Risk Category

Dropdown allows users to choose the Risk Category (Default to 'Show All').

Responsible Officer

Dropdown allows users to choose the Responsible Officer (Default to 'Show All').

Risk Treatment

Dropdown allows users to choose the Risk Treatment (Default to 'Show All').

Sort Risk First Priority

Dropdown allows users to sort the Priorities accordingly. This allows the user to define the First sorting priority (Default is set to 'Current Risk Rating').

Sort Risk Second Priority

Dropdown allows users to sort the Priorities accordingly. This allows the user to define the Second sorting priority (Default is set to 'Initial Risk Rating').

Sort Risk Third Priority

Dropdown allows users to sort the Priorities accordingly. This allows the user to define the Third sorting priority (Default is set to 'Risk Code').

Risk Status

Dropdown allows users to choose the status of the Risk (Default is set to 'Active').

Business Process

Dropdown allows users to choose the Business Process which is applied to the Risk (Default is set to 'Show All'). This is only applicable if these fields are enabled.

Legislation

Dropdown allows users to choose the legislation which is applied to the Risk (Default is set to 'Show All'). This is only applicable if these fields are enabled.

Risk Level

Dropdown will display the three assessment phases (Initial, Current and Future).

Date Selection (Date TO and FROM)

This will allow users to filter out the risks based on risk review dates. 

Action

Allows you to filter the Project Risks by the specific Action (Default to 'Show All').

REPORT DETAILS

REPORT DETAILS

Report Element

Description

Cover Page

Cover page displaying the report title, client logo.

Risk Details

Reference Number

Displays the Risk Code.

Risk Title

Displays the Risk Title.

Risk Rating

Displays the Risk Rating colour and description.

Primary Category

Displays the Primary category of the report.

Primary Subcategory

Displays the Primary Subcategory of the report.

Secondary Categories

Displays the Secondary Categories of the report.

Responsible Officer

Displays the Responsible officer.

Secondary Responsible Officers

Displays the Secondary Responsible Officers.

Risk Identification

Initial

Displays Likelihood, Consequence and Risk Rating for the Initial assessment.

Current

Displays likelihood, Consequence, Effectiveness of Controls and Risk Rating for the Current assessment.

Future

Displays likelihood, Consequence and Risk Rating for the Future assessment.

Causes

Displays the causes of the Risk from the text field within the initial assessment.

Consequences

Displays the consequences of the Risk from the text field within the initial assessment.

Risk Controls

Displays the Risk Control titles and descriptions.

Solutions

Displays the Risk actions (Risk Action, Risk Control Linked item (if applicable), Action Status, End Date, Progress Comments and Responsible Officer).

Report output example:

5. Operational Risk Report (Standard)

The Operational Risk report shows all Operational Risks. It displays all data which contributes to the setup of the risk, as well as the Initial, Current and Future rating and the risk progress.

FILTERS

FILTERS

Filter

Description

Directorate

Dropdown allows selection of Directorate. 'Show All' is selected by default.

Business Unit

Dropdown allows selection of Business Unit. If a directorate was selected above, the pages refreshes and this filter only shows the Business Units within that directorate. 'Show All' is selected by default.

Risk Rating Initial

Dropdown allows selection of a Risk Rating for the Initial phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Rating Current

Dropdown allows selection of a Risk Rating for the Current phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Rating Future

Dropdown allows selection of a Risk Rating for the Future phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Category

Dropdown allows selection of a Risk Category (defined in Risk Settings > Categories). 'Show All' is selected by default.

Responsible Officer

Dropdown allows selection of a Staff member (defined in Framework > Staff). 'Show All' is selected by default.

Include Secondary Responsible Person

If ticked, chooses the risk records where selected staff member is primary OR secondary responsible person for. This is un-ticked by default.

Show Risk Solution and Business Planning details

If ticked, includes additional Risk Solution (risk action) and Business Planning details. This is ticked by default.

Show Solution Summary only

If ticked, only the Risk Solution (without details) will be shown in the relevant area. This is ticked by default.

Risk Treatment

Dropdown allows selection of a Risk Treatment (defined in Risk Settings > Risk Treatment). 'Show All' is selected by default.

Order By

Dropdown allows selecting a sorting mechanism for the records in the report to be listed down. Alphabetical order by Risk Name, By Risk Code and by Risk Rating (Initial, Current or Future) are some of the given options. 'Alphabetical order by Risk Name' is selected by default.

Risk Status

Dropdown allows selection of a Risk Status, to be chosen from whether that Risk is 'Active' or 'Inactive'.

Business Process

Dropdown allows selection of a Business Process (defined in Risk Settings > Advanced Settings > Business Process). 'Show All' is selected by default.

Legislation

Dropdown allows selection of a Legislation (defined in Risk Settings > Advanced Settings > Legislation). 'Show All' is selected by default.

REPORT DETAILS

REPORT DETAILS

Report Element

Description

Directorate

Name of the Directorate selected by user.

Business Unit

Name of the Business Unit selected by the user.

Reference Number

Unique number for each risk. Reference Code is given at the Risk creation.

Risk

Risk name. This is mentioned at the Risk creation.

Responsible Officer

Responsible Officer allocated for the Risk.

Secondary Responsible Officer(s)

Secondary Responsible Officers allocated for the Risk.

Risk Category

Risk categories (primary category listed first and then secondary categories if relevant). Selected at the Risk creation.

Review Frequency

Risk review frequency (i.e., annual, monthly etc.) Data drawn from the chosen Review Frequency at Operational Risk > Risk Review area. Different Review Frequencies are defined at Risk Settings > Advanced Settings > Review Frequency area.

Assessment phases for a Risk. Under each phase there are sub-sections such as assessment, solution and treatment.
Each sub-section also contains Risk attributes.

Initial Assessment

Current Assessment

Future Assessment

Assessment phases

Likelihood

Risk likelihood identified in Initial phase

Consequence

Risk consequence (identified via Consequence Reference Grid)

Effectiveness of Controls

Effectiveness of Controls identified in Initial phase

Custom Criteria

Client defined criteria

Last Modified Date

Date Initial risk assessment last saved. Will appear as N/A if no date available (possible if data was migrated)

Risk Rating

Initial risk assessment rating (as per the calculation defined in Risk Calculation Settings)

Causes

Causes identified during Initial phase

Consequences

Consequences identified during Initial phase

Existing Controls

Existing Controls identified during Initial phase

Future Controls

Future Controls identified during Initial phase

Treatment (s)

Treatments identified in Initial phase

Risk Solution Related Fields.
‘Show Risk Solution and Business Planning details’ tick box must be ticked to display these.
Separated by a dashed line break.

Name of Risk Solution

Solution

Responsible Officer*

Responsible Officer for the solution

Reporting Frequency*

Risk solution reporting frequency i.e., annual, monthly etc.

Status*

Status of Solution (i.e., In Progress, Completed)

Due Date / Completed Date*

Due Date and Completed Date of Risk Action. Will appear as N/A if date is not mentioned.

% Complete*

Percentage complete of risk solution

Progress Comment*

Last Progress Comment for risk solution

Resource Requirement*

Resource Requirement for Risk solution

Business Plans connected fields.
‘Show Risk Solution and Business Planning details’ tick box should be ticked to display these.
Separated by a dashed line break.

All Goals linked to this Risk are listed if “Link Risks to hierarchy” parameter on.

Related Goals*

Related Outcomes (Risk Solutions) *

All Outcomes linked to this Risk’s Solutions are listed

Related Actions*

All Actions linked to this Risk are listed if “Link Risks to hierarchy” parameter on.

Related Tasks*

All Tasks linked to this Risk are listed if “Link Risks to hierarchy” parameter on.

Related Tasks (Risk Solutions) *

All Tasks linked to this Risk’s Solutions are listed

Business Process

Related Business Processes.

Legislation

Related Legislation.

6. Project Risk Report - Standard

This report shows all Project related Risks. It displays all data which contributes to the setup of the risk, as well as the Initial, Current and Future rating and the risk progress.

FILTERS

FILTERS

Filter

Description

Directorate

Dropdown allows selection of Directorate.

Business Unit

Dropdown allows selection of Business Unit. If an Directorate was selected above, the pages refreshes and this filter only shows the within that Directorate. 'Show All' is selected by default.

Risk Rating Initial

Dropdown allows selection of a Risk Rating for the Initial phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Rating Current

Dropdown allows selection of a Risk Rating for the Current phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Rating Future

Dropdown allows selection of a Risk Rating for the Future phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Category

Dropdown allows selection of a risk category (defined in Risk Settings > Categories). 'Show All' is selected by default.

Responsible Officer

Dropdown allows selection of a Staff member (defined in Framework > Staff). 'Show All' is selected by default.

Include Secondary Responsible Person

If ticked, chooses the risk records where selected staff member is primary OR secondary responsible person for. This is un-ticked by default.

Show Risk Solution and Business Planning details

If ticked, includes additional Risk Solution and Business Planning details. This is ticked by default.

Show Solution Summary only

If ticked, only the Risk Solution (without details) will be shown in the relevant area. This is ticked by default.

Risk Treatment

Dropdown allows selection of a Risk Treatment (defined in Risk Settings > Risk Treatment). 'Show All' is selected by default.

Order By

Dropdown allows selecting a sorting mechanism for the records in the report to be listed down. Alphabetical order by Risk Name, By Risk Code and by Risk Rating (Initial, Current or Future) are some of the given options. 'Alphabetical order by Risk Name' is selected by default.

Risk Status

Dropdown allows selection of a Risk Status, to be chosen from whether that Risk is 'Active' or 'Inactive'.

Business Process

Dropdown allows selection of a Business Process (defined in Risk Settings > Advanced Settings > Business Process). 'Show All' is selected by default.

Legislation

Dropdown allows selection of a Legislation (defined in Risk Settings > Advanced Settings > Legislation). 'Show All' is selected by default.

Project

Dropdown allows selection of a Name of the Project that a project risk has been created for. 'Show All' is selected by default.

REPORT DETAILS

Report Element

Description

Directorate

Name of the Directorate selected by user.

Business Unit

Name of the Business Unit selected by the user.

Project

Name of the Project that Risk has been created for.

Risk Code

Unique code for each risk. Risk Code is given at the Risk creation.

Risk

Risk name.

Responsible Officer

Responsible Officer allocated for the Risk.

Secondary Responsible Officer (s)

Secondary Responsible Officers allocated for the Risk.

Risk Category

Risk categories (primary category listed first and then secondary categories if relevant). Selected at the Risk creation.

Review Frequency

Risk review frequency (i.e., annual, monthly etc.) Data drawn from the chosen Review Frequency at Operational Risk > Risk Review area. Different Review Frequencies are defined at Risk Settings > Advanced Settings > Review Frequency area.

Assessment phases for a Risk. Under each phase there are sub-sections such as assessment, solution and treatment.
Each sub-section also contains Risk attributes.

Initial Assessment

Current Assessment

Future Assessment

Assessment phases

Likelihood

Risk likelihood identified in Initial phase

Consequence

Risk consequence (identified via Consequence Reference Grid)

Effectiveness of Controls

Effectiveness of Controls identified in Initial phase

Custom Criteria

Client defined criteria

Last Modified Date

Date Initial risk assessment last saved. Will appear as N/A if no date available (possible if data was migrated)

Risk Rating

Initial risk assessment rating (as per the calculation defined in Risk Calculation Settings)

Causes

Causes identified during Initial phase

Consequences

Consequences identified during Initial phase

Existing Controls

Existing Controls identified during Initial phase

Future Controls

Future Controls identified during Initial phase

Treatment(s)

Treatments identified in Initial phase

Risk Solution Related Fields.
‘Show Risk Solution and Business Planning details’ tick box must be ticked to display these.

Solution

Name of Risk Solution

Responsible Officer*

Responsible Officer for the solution

Reporting Frequency*

Risk solution reporting frequency i.e., annual, monthly etc.

Status*

Status of Solution (i.e., In Progress, Completed)

Due Date / Completed Date*

Due Date and Completed Date of Risk Action. Will appear as N/A if date is not mentioned.

% Complete*

Percentage complete of risk solution

Progress Comment*

Last Progress Comment for risk solution

Resource Requirement*

Resource Requirement for Risk solution

Business Plans con