Risk Reports

1. Overview

The system provides a range of standard reports which allows you to filter and generate reports on risks and risk actions in your system.

Reports can be accessed from the Navigation Menu under Reports > Risk Reports.

Figure 1.1

Note: Risk Reports can be accessed from the left-hand navigation panel too.

Figure 1.2

Once the report has loaded in the SSRS viewer, it is up to you on whether you want to export the report to Microsoft Word (editable) or PDF (View) or Excel (Editable).

When clicking on any of the report icons, you will select the filters available (if applicable) and then click on the preview icon to load the report.

Select the export icon to choose your selection:

Note: some reports are developed specifically for an excel export (mainly the risk register reports), and some reports are better viewed with PDF (generally all other standard reports).

When exporting to MS Word, there may be some formatting limitations that will occur. CAMMS can look at these if required. There is no guarantee that all formatting issues can be resolved at CAMMS end. However, we can highlight these to Microsoft.

Risk Reports – CAMMS Standard

  1. Full Risk Register – CAMMS Standard

  2. Simple Risk Register Report – CAMMS Standard/Other Risk Reports

  3. Individual Risk Report – CAMMS Standard

  4. Operational Risk Report – CAMMS Standard

  5. Project Risk Report – CAMMS Standard

  6. Strategic Risk Report – CAMMS Standard

  7. Risk Action Summary Report – CAMMS Standard

  8. Risk Executive Report – CAMMS Standard

  9. Risk Professional System Administration Report – CAMMS Standard

  10. Risk Status Report – CAMMS Standard

  11. Risk Action Status Report – CAMMS Standard

  12. Risk Action Report – CAMMS Standard

Administration Reports (Stand Alone Only) click here to view Admin Reports

  • Organisation View – CAMMS Standard

  • Organisational List – CAMMS Standard

  • Staff List – CAMMS Standard

  • User Overview – CAMMS Standard

2. Full Risk Register Report (Standard)

This report contains a full export of the risks, mitigations and descriptions of the risk criteria used.

Please note – whilst this report can be downloaded in a variety of formats, because of the unique formatting this report has, MS Excel is the most appropriate medium for report presentation. The report format and columns can then be manipulated to suit. If generated in PDF for example, screen views may be restrictive due to the size and format of the report.

FILTERS

FILTERS

Filter

Description

Risk Type

Dropdown allows users to choose the type of risk (Default to 'Show All').

Directorate

Dropdown allows users to choose the Directorate (Default to 'Show All').

Business Unit

Dropdown allows the users to choose the Business Unit (Default to 'Show All').

Risk Category

Dropdown allows the users to choose a Risk Category (Default to 'Show All').

Responsible Officer

Dropdown allows the users to choose the Responsible Officer (Default to 'Show All').

Risk Treatment

Dropdown allows the users to choose the Risk Treatment (Default to 'Show All').

Sort Risk First Priority

Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the First sorting priority (Default is set to 'Current Risk Rating').

Sort Risk Second Priority

Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the Second sorting priority (Default is set to 'Initial Risk Rating').

Sort Risk Third Priority

Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the Third sorting priority (Default is set to 'Risk Code').

Risk Status

Dropdown allows the users to choose the status of the Risk (Default is set to 'Active').

Business Process

Dropdown allows the users to choose the Business Process which is applied to the Risk (Default is set to 'Show All'). Only Applicable if you utilise these fields.

Legislation

Dropdown allows the users to choose the legislation which is applied to the Risk (Default is set to 'Show All'). Only Applicable if you utilise these fields.

Action

Allows you to filter the Project Risks by the specific Action (Default to 'Show All').

REPORT DETAILS

REPORT DETAILS

Report Element

Description

Reference Number

Displays the Risk Code.

Risk Title

Displays the Risk Title.

Primary Category/Subcategory

Displays the Primary Category followed by the Subcategory.

Secondary Categories

Displays the Secondary Categories.

Risk Type

Displays the Risk Type.

Risk Identification

Risk Title

Displays the Risk Title.

Causes

Displays the Causes for the three assessments - Initial, Current and Future.

Consequences

Displays the Consequences for the three assessments - Initial, Current and Future.

Existing controls

Displays the Existing Controls for the three assessments - Initial, Current and Future.

Evaluation

Effectiveness of Controls

Displays the effectiveness for the three assessments.

Risk Treatment

Displays the Risk Treatment for the three assessments.

Initial Risk Assessment Rating

Consequences

Displays the rating for the consequences.

Likelihood

Displays the rating for the Likelihood.

Risk Rating Score

Displays the Initial Risk Rating Score.

Risk Rating

Displays the overall Risk Rating image.

Excel Export:

3. Simple Risk Register (Standard)

This Report contains an export of the risks and a highlight of its related details.

Please note – whilst this report can be downloaded in a variety of formats, because of the unique formatting this report has, MS Excel is the most appropriate medium for report presentation. The report format and columns can then be manipulated to suit. If generated in PDF for example, screen views may be restrictive due to the size and format of the report.

FILTERS

FILTERS

Filter

Description

Risk Type

Dropdown allows the users to choose the type of risk (Default to 'Show All').

Directorate

Dropdown allows the users to choose the Directorate (Default to 'Show All').

Business Unit

Dropdown allows the users to choose the Business Unit (Default to 'Show All').

Note: If 'Strategic Risk' is selected for Risk type, selecting 'Directorate’ or 'Business Unit’ will display a blank report. This is due to strategic risks not having these links.

Risk Category

Dropdown allows users to choose the Risk Category (Default to 'Show All').

Responsible Officer

Dropdown allows the users to choose the Responsible Officer (Default to 'Show All').

Risk Treatment

Dropdown allows the users to choose the Risk Treatment (Default to 'Show All').

Sort Risk First Priority

Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the First sorting priority (Default is set to 'Current Risk Rating').

Sort Risk Second Priority

Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the Second sorting priority (Default is set to 'Initial Risk Rating').

Sort Risk Third Priority

Dropdown allows the users to sort the Priorities accordingly. This allows the user to define the Third sorting priority (Default is set to 'Risk Code').

Risk Status

Dropdown allows the users to choose the status of the Risk (Default is set to 'Active').

Business Process

Dropdown allows the users to choose the Business Process which is applied to the Risk (Default is set to 'Show All'). Only Applicable if you have these fields enabled.

Legislation

Dropdown allows the users to choose the legislation which is applied to the Risk (Default is set to 'Show All'). Only Applicable if you have these fields enabled.

Project

Allows you to filter the Project Risks by the specific Project (Default to 'Show All').

REPORT DETAILS

REPORT DETAILS

Report Element

Description

Risk Code

Displays the Risk Code.

Risk Description

Displays the Risk Description.

Causes - Initial

Displays the Causes through the Initial state.

Risk Action

Displays the Risk Actions against the Risk.

Primary Category/Subcategory

Displays the Primary and Subcategories.

Secondary Categories

Displays the Secondary Categories.

Responsible Person

Displays the Responsible Person name.

Secondary Responsible Persons

Displays the Secondary Responsible Person name.

Business Unit

Displays the Business Unit that the risk is linked to (Operational risks only).

Initial

Consequence

Displays the Consequence description for the initial assessment.

Likelihood

Displays the Likelihood description for the initial assessment.

Risk Rating

Displays the Risk Rating in the Initial assessment. The cell will be coloured based on the risk rating.

Current

Consequence

Displays the Consequence description for the current assessment.

Effectiveness of Controls

Displays the Effectiveness of controls description.

Likelihood

Displays the Likelihood description for the current assessment.

Risk Rating

Displays the Risk Rating in the Current assessment. The cell will be coloured based on the risk rating.

Future

Consequence

Displays the Consequence description for the Future assessment.

Likelihood

Displays the Likelihood description for the Future assessment.

Risk Rating

Displays the Risk Rating in the Future assessment. The cell will be coloured based on the risk rating.

Report output example:

4. Individual Risk Report (Standard)

This Report contains the details of each risks including the relevant risk actions and linked controls.

FILTERS

FILTERS

Filter

Description

Risk Type

Dropdown allows users to choose the type of risk (Default to 'Show All').

Directorate

Dropdown allows users to choose the Directorate (Default to 'Show All').

Business Unit

Dropdown allows users to choose the Business Unit (Default to 'Show All').

Risk Rating Initial

This will allow users to choose the Initial rating for the Risk (Default to 'Show All').

Risk Rating Current

This will allow users to choose the Current rating for the Risk (Default to 'Show All').

Risk Rating Future

This will allow users to choose the Future rating for the Risk (Default to 'Show All').

Risk Category

Dropdown allows users to choose the Risk Category (Default to 'Show All').

Responsible Officer

Dropdown allows users to choose the Responsible Officer (Default to 'Show All').

Risk Treatment

Dropdown allows users to choose the Risk Treatment (Default to 'Show All').

Sort Risk First Priority

Dropdown allows users to sort the Priorities accordingly. This allows the user to define the First sorting priority (Default is set to 'Current Risk Rating').

Sort Risk Second Priority

Dropdown allows users to sort the Priorities accordingly. This allows the user to define the Second sorting priority (Default is set to 'Initial Risk Rating').

Sort Risk Third Priority

Dropdown allows users to sort the Priorities accordingly. This allows the user to define the Third sorting priority (Default is set to 'Risk Code').

Risk Status

Dropdown allows users to choose the status of the Risk (Default is set to 'Active').

Business Process

Dropdown allows users to choose the Business Process which is applied to the Risk (Default is set to 'Show All'). This is only applicable if these fields are enabled.

Legislation

Dropdown allows users to choose the legislation which is applied to the Risk (Default is set to 'Show All'). This is only applicable if these fields are enabled.

Risk Level

Dropdown will display the three assessment phases (Initial, Current and Future).

Date Selection (Date TO and FROM)

This will allow users to filter out the risks based on risk review dates. 

Action

Allows you to filter the Project Risks by the specific Action (Default to 'Show All').

REPORT DETAILS

REPORT DETAILS

Report Element

Description

Cover Page

Cover page displaying the report title, client logo.

Risk Details

Reference Number

Displays the Risk Code.

Risk Title

Displays the Risk Title.

Risk Rating

Displays the Risk Rating colour and description.

Primary Category

Displays the Primary category of the report.

Primary Subcategory

Displays the Primary Subcategory of the report.

Secondary Categories

Displays the Secondary Categories of the report.

Responsible Officer

Displays the Responsible officer.

Secondary Responsible Officers

Displays the Secondary Responsible Officers.

Risk Identification

Initial

Displays Likelihood, Consequence and Risk Rating for the Initial assessment.

Current

Displays likelihood, Consequence, Effectiveness of Controls and Risk Rating for the Current assessment.

Future

Displays likelihood, Consequence and Risk Rating for the Future assessment.

Causes

Displays the causes of the Risk from the text field within the initial assessment.

Consequences

Displays the consequences of the Risk from the text field within the initial assessment.

Risk Controls

Displays the Risk Control titles and descriptions.

Solutions

Displays the Risk actions (Risk Action, Risk Control Linked item (if applicable), Action Status, End Date, Progress Comments and Responsible Officer).

Report output example:

5. Operational Risk Report (Standard)

The Operational Risk report shows all Operational Risks. It displays all data which contributes to the setup of the risk, as well as the Initial, Current and Future rating and the risk progress.

FILTERS

FILTERS

Filter

Description

Directorate

Dropdown allows selection of Directorate. 'Show All' is selected by default.

Business Unit

Dropdown allows selection of Business Unit. If a directorate was selected above, the pages refreshes and this filter only shows the Business Units within that directorate. 'Show All' is selected by default.

Risk Rating Initial

Dropdown allows selection of a Risk Rating for the Initial phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Rating Current

Dropdown allows selection of a Risk Rating for the Current phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Rating Future

Dropdown allows selection of a Risk Rating for the Future phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Category

Dropdown allows selection of a Risk Category (defined in Risk Settings > Categories). 'Show All' is selected by default.

Responsible Officer

Dropdown allows selection of a Staff member (defined in Framework > Staff). 'Show All' is selected by default.

Include Secondary Responsible Person

If ticked, chooses the risk records where selected staff member is primary OR secondary responsible person for. This is un-ticked by default.

Show Risk Solution and Business Planning details

If ticked, includes additional Risk Solution (risk action) and Business Planning details. This is ticked by default.

Show Solution Summary only

If ticked, only the Risk Solution (without details) will be shown in the relevant area. This is ticked by default.

Risk Treatment

Dropdown allows selection of a Risk Treatment (defined in Risk Settings > Risk Treatment). 'Show All' is selected by default.

Order By

Dropdown allows selecting a sorting mechanism for the records in the report to be listed down. Alphabetical order by Risk Name, By Risk Code and by Risk Rating (Initial, Current or Future) are some of the given options. 'Alphabetical order by Risk Name' is selected by default.

Risk Status

Dropdown allows selection of a Risk Status, to be chosen from whether that Risk is 'Active' or 'Inactive'.

Business Process

Dropdown allows selection of a Business Process (defined in Risk Settings > Advanced Settings > Business Process). 'Show All' is selected by default.

Legislation

Dropdown allows selection of a Legislation (defined in Risk Settings > Advanced Settings > Legislation). 'Show All' is selected by default.

REPORT DETAILS

REPORT DETAILS

Report Element

Description

Directorate

Name of the Directorate selected by user.

Business Unit

Name of the Business Unit selected by the user.

Reference Number

Unique number for each risk. Reference Code is given at the Risk creation.

Risk

Risk name. This is mentioned at the Risk creation.

Responsible Officer

Responsible Officer allocated for the Risk.

Secondary Responsible Officer(s)

Secondary Responsible Officers allocated for the Risk.

Risk Category

Risk categories (primary category listed first and then secondary categories if relevant). Selected at the Risk creation.

Review Frequency

Risk review frequency (i.e., annual, monthly etc.) Data drawn from the chosen Review Frequency at Operational Risk > Risk Review area. Different Review Frequencies are defined at Risk Settings > Advanced Settings > Review Frequency area.

Assessment phases for a Risk. Under each phase there are sub-sections such as assessment, solution and treatment.
Each sub-section also contains Risk attributes.

Initial Assessment

Current Assessment

Future Assessment

Assessment phases

Likelihood

Risk likelihood identified in Initial phase

Consequence

Risk consequence (identified via Consequence Reference Grid)

Effectiveness of Controls

Effectiveness of Controls identified in Initial phase

Custom Criteria

Client defined criteria

Last Modified Date

Date Initial risk assessment last saved. Will appear as N/A if no date available (possible if data was migrated)

Risk Rating

Initial risk assessment rating (as per the calculation defined in Risk Calculation Settings)

Causes

Causes identified during Initial phase

Consequences

Consequences identified during Initial phase

Existing Controls

Existing Controls identified during Initial phase

Future Controls

Future Controls identified during Initial phase

Treatment (s)

Treatments identified in Initial phase

Risk Solution Related Fields.
‘Show Risk Solution and Business Planning details’ tick box must be ticked to display these.
Separated by a dashed line break.

Name of Risk Solution

Solution

Responsible Officer*

Responsible Officer for the solution

Reporting Frequency*

Risk solution reporting frequency i.e., annual, monthly etc.

Status*

Status of Solution (i.e., In Progress, Completed)

Due Date / Completed Date*

Due Date and Completed Date of Risk Action. Will appear as N/A if date is not mentioned.

% Complete*

Percentage complete of risk solution

Progress Comment*

Last Progress Comment for risk solution

Resource Requirement*

Resource Requirement for Risk solution

Business Plans connected fields.
‘Show Risk Solution and Business Planning details’ tick box should be ticked to display these.
Separated by a dashed line break.

All Goals linked to this Risk are listed if “Link Risks to hierarchy” parameter on.

Related Goals*

Related Outcomes (Risk Solutions) *

All Outcomes linked to this Risk’s Solutions are listed

Related Actions*

All Actions linked to this Risk are listed if “Link Risks to hierarchy” parameter on.

Related Tasks*

All Tasks linked to this Risk are listed if “Link Risks to hierarchy” parameter on.

Related Tasks (Risk Solutions) *

All Tasks linked to this Risk’s Solutions are listed

Business Process

Related Business Processes.

Legislation

Related Legislation.

6. Project Risk Report - Standard

This report shows all Project related Risks. It displays all data which contributes to the setup of the risk, as well as the Initial, Current and Future rating and the risk progress.

FILTERS

FILTERS

Filter

Description

Directorate

Dropdown allows selection of Directorate.

Business Unit

Dropdown allows selection of Business Unit. If an Directorate was selected above, the pages refreshes and this filter only shows the within that Directorate. 'Show All' is selected by default.

Risk Rating Initial

Dropdown allows selection of a Risk Rating for the Initial phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Rating Current

Dropdown allows selection of a Risk Rating for the Current phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Rating Future

Dropdown allows selection of a Risk Rating for the Future phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Category

Dropdown allows selection of a risk category (defined in Risk Settings > Categories). 'Show All' is selected by default.

Responsible Officer

Dropdown allows selection of a Staff member (defined in Framework > Staff). 'Show All' is selected by default.

Include Secondary Responsible Person

If ticked, chooses the risk records where selected staff member is primary OR secondary responsible person for. This is un-ticked by default.

Show Risk Solution and Business Planning details

If ticked, includes additional Risk Solution and Business Planning details. This is ticked by default.

Show Solution Summary only

If ticked, only the Risk Solution (without details) will be shown in the relevant area. This is ticked by default.

Risk Treatment

Dropdown allows selection of a Risk Treatment (defined in Risk Settings > Risk Treatment). 'Show All' is selected by default.

Order By

Dropdown allows selecting a sorting mechanism for the records in the report to be listed down. Alphabetical order by Risk Name, By Risk Code and by Risk Rating (Initial, Current or Future) are some of the given options. 'Alphabetical order by Risk Name' is selected by default.

Risk Status

Dropdown allows selection of a Risk Status, to be chosen from whether that Risk is 'Active' or 'Inactive'.

Business Process

Dropdown allows selection of a Business Process (defined in Risk Settings > Advanced Settings > Business Process). 'Show All' is selected by default.

Legislation

Dropdown allows selection of a Legislation (defined in Risk Settings > Advanced Settings > Legislation). 'Show All' is selected by default.

Project

Dropdown allows selection of a Name of the Project that a project risk has been created for. 'Show All' is selected by default.

REPORT DETAILS

Report Element

Description

Directorate

Name of the Directorate selected by user.

Business Unit

Name of the Business Unit selected by the user.

Project

Name of the Project that Risk has been created for.

Risk Code

Unique code for each risk. Risk Code is given at the Risk creation.

Risk

Risk name.

Responsible Officer

Responsible Officer allocated for the Risk.

Secondary Responsible Officer (s)

Secondary Responsible Officers allocated for the Risk.

Risk Category

Risk categories (primary category listed first and then secondary categories if relevant). Selected at the Risk creation.

Review Frequency

Risk review frequency (i.e., annual, monthly etc.) Data drawn from the chosen Review Frequency at Operational Risk > Risk Review area. Different Review Frequencies are defined at Risk Settings > Advanced Settings > Review Frequency area.

Assessment phases for a Risk. Under each phase there are sub-sections such as assessment, solution and treatment.
Each sub-section also contains Risk attributes.

Initial Assessment

Current Assessment

Future Assessment

Assessment phases

Likelihood

Risk likelihood identified in Initial phase

Consequence

Risk consequence (identified via Consequence Reference Grid)

Effectiveness of Controls

Effectiveness of Controls identified in Initial phase

Custom Criteria

Client defined criteria

Last Modified Date

Date Initial risk assessment last saved. Will appear as N/A if no date available (possible if data was migrated)

Risk Rating

Initial risk assessment rating (as per the calculation defined in Risk Calculation Settings)

Causes

Causes identified during Initial phase

Consequences

Consequences identified during Initial phase

Existing Controls

Existing Controls identified during Initial phase

Future Controls

Future Controls identified during Initial phase

Treatment(s)

Treatments identified in Initial phase

Risk Solution Related Fields.
‘Show Risk Solution and Business Planning details’ tick box must be ticked to display these.

Solution

Name of Risk Solution

Responsible Officer*

Responsible Officer for the solution

Reporting Frequency*

Risk solution reporting frequency i.e., annual, monthly etc.

Status*

Status of Solution (i.e., In Progress, Completed)

Due Date / Completed Date*

Due Date and Completed Date of Risk Action. Will appear as N/A if date is not mentioned.

% Complete*

Percentage complete of risk solution

Progress Comment*

Last Progress Comment for risk solution

Resource Requirement*

Resource Requirement for Risk solution

Business Plans connected fields.
*Not Applicable

Report example output:

7. Strategic Risk Report - Standard

This report shows information on Strategic Risks. It displays all data which contributes to the setup of the risk, as well as the Initial, Current and Future rating and the risk progress.

To access this report, follow the steps below.

Select the 'Strategic Risk Report - Standard' and choose relevant criteria. Click the Preview button.

FILTERS

FILTERS

Filter

Description

Risk Rating Initial

Dropdown allows selection of a Risk Rating for the Initial phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Rating Current

Dropdown allows selection of a Risk Rating for the Current phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Rating Future

Dropdown allows selection of a Risk Rating for the Future phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Category

Dropdown allows selection of a Category (defined in Risk Settings > Categories). 'Show All' is selected by default.

Responsible Officer

Dropdown allows selection of a Staff member (defined in Framework > Staff). 'Show All' is selected by default.

Include Secondary Responsible Person

If ticked, chooses the risk records where selected staff member is primary OR secondary responsible person for. This is un-ticked by default.

Show Risk Solution and Business Planning details

If ticked, includes additional Risk Solution and Business Planning details. This is ticked by default.

Show Solution Summary only

If ticked, only the Risk Solution (without details) will be shown in the relevant area. This is ticked by default.

Risk Treatment

Dropdown allows selection of a Risk Treatment (defined in Risk Settings > Risk Treatment). 'Show All' is selected by default.

Order By

Dropdown allows selecting a sorting mechanism for the records in the report to be listed down. Alphabetical order by Risk Name, By Risk Code and by Risk Rating (Initial, Current or Future) are some of the given options. 'Alphabetical order by Risk Name' is selected by default.

Risk Status

Dropdown allows selection of a Risk Status, to be chosen from whether that Risk is 'Active' or 'Inactive'.

Business Process

Dropdown allows selection of a Business Process (defined in Risk Settings > Advanced Settings > Business Process). 'Show All' is selected by default. If Applicable.

Legislation

Dropdown allows selection of a Legislation (defined in Risk Settings > Advanced Settings > Legislation). 'Show All' is selected by default. If Applicable.

REPORT DETAILS

REPORT DETAILS

Report Element

Description

Risk Code

Unique number for each risk. Risk Code is given at the Risk creation.

Risk

Risk name

Responsible Officer

Responsible Officer allocated for the Risk.

Secondary Responsible Officer(s)

Secondary Responsible Officers allocated for the Risk.

Primary Risk Category

Primary Risk Category Selected (primary category listed first and then secondary categories if relevant). Selected at the Risk creation.

Review Frequency

Risk review frequency (i.e., annual, monthly etc.) Data drawn from the chosen Review Frequency at Operational Risk > Risk Review area. Different Review Frequencies are defined at Risk Settings > Advanced Settings > Review Frequency area.

Assessment phases for a Risk. Under each phase there are sub-sections such as assessment, solution and treatment.
Each sub-section also contains Risk attributes.

Initial Assessment

Current Assessment

Future Assessment

Assessment phases

Likelihood

Risk likelihood identified in Initial phase

Consequence

Risk consequence (identified via Consequence Reference Grid)

Effectiveness of Controls

Effectiveness of Controls identified in Initial phase

Last Changed Date

Date Initial risk assessment last saved. Will appear as N/A if no date available (possible if data was migrated)



Risk Rating

Initial risk assessment rating (as per the calculation defined in Risk Calculation Settings)

Causes

Causes identified during Initial phase

Consequences

Consequences identified during Initial phase

Existing Controls

Existing Controls identified during Initial phase

Future Controls

Future Controls identified during Initial phase

Treatment(s)

Treatments identified in Initial phase

Risk Solution Related Fields.
‘Show Risk Solution and Business Planning details’ tick box must be ticked to display these.

Solution

Name of Risk Solution

Responsible Officer*

Responsible Officer for the solution

Reporting Frequency*

Risk solution reporting frequency i.e., annual, monthly

Status*

Status of Solution (i.e., In Progress, Completed)

Due Date/Completed Date*

Due Date and Completed Date of Risk Action. Will appear as N/A if date is not mentioned.

% Complete*

Percentage complete of risk solution

Progress Comment*

Last Progress Comment for risk solution

Resource Requirement*

Resource Requirement for Risk solution

Business Plans connected fields.
‘Show Risk Solution and Business Planning details’ tick box should be ticked to display these.

Related Goals*

All Goals linked to this Risk are listed if “Link Risks to hierarchy” parameter on.

Related Goals (Risk Solutions) *

All Goals linked to this Risk’s Solutions are listed

Related Outcomes*

All Outcomes linked to this Risk are listed if “Link Risks to hierarchy” parameter on.

Related Outcomes (Risk Solutions) *

All Outcomes linked to this Risk’s Solutions are listed

Related Strategies*

All Strategies linked to this Risk are listed if “Link Risks to hierarchy” parameter on.

Related Strategies (Risk Solutions) *

All Strategies linked to this Risk’s Solutions are listed

Related Actions*

All Actions linked to this Risk are listed if “Link Risks to hierarchy” parameter on.

Related Actions (Risk Solutions) *

All Actions linked to this Risk and its Solutions are listed

Related Tasks*

All Tasks linked to this Risk are listed if “Link Risks to hierarchy” parameter on.

Report example output:

8. Risk Action Summary Report

This report will contain an overview of all risk actions that are overdue or scheduled. This report will show graphs and a progress table of all risk actions, linked to the Business Unit.

FILTERS

FILTERS

Filter

Description

Risk Type

Dropdown allows users to choose the type of risk (Default to 'Show All').

Directorate

Dropdown allows users to choose the Directorate (Default to 'Show All').

Business Unit

Dropdown allows users to choose the Business Unit (Default to 'Show All').

Risk Category

Dropdown allows selection of a Risk Category (defined in Risk Settings > Categories). 'Show All' is selected by default.

Risk Responsible Person

Dropdown allows selection of a Staff member (defined in Framework > Staff) to filter by risk responsible officer. 'Show All' is selected by default.

Risk Status

Dropdown allows the users to choose the status of the Risk (Default is set to 'Active').

Date Section (TO and FROM)

This will allow user to input the start and end date of the risk solutions.

Risk Rating Initial

Dropdown allows selection of a Risk Rating for the Initial phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Rating Current

Dropdown allows selection of a Risk Rating for the Current phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Rating Future

Dropdown allows selection of a Risk Rating for the Future phase of the risk assessment (defined in Risk Settings > Risk Ratings). 'Show All' is selected by default.

Risk Action Status

Dropdown allows selection of the risk action status (Completed, Overdue or in progress).

Show Risk Actions Overview

Tick box will allow you to show or hide the ‘Risk Actions Overview’ section of the report. Default will be to show the section (Ticked). If you were to untick this, then it will hide from the report.

Show Risk Action Summary Chart

Tick box will allows you to show or hide the ‘Risk Action Summary Chart’ section of the report. Default will be to show the section (Ticked). If you were to untick this, then it will hide from the report.

Show Filter Page

Tick box will allows you to show or hide the filter page in the report. Default will be to show the section (Ticked). If you were to untick this, then it will hide from the report

Show Risk Action Summary

Tick box will allows you to show or hide the ‘Risk Action Summary’ section of the report. Default will be to show the section (Ticked). If you were to untick this, then it will hide from the report.

REPORT DETAILS

REPORT DETAILS

Report Element

Description

Cover Page

Cover Page which will show the report name and client logo.

Report Filter Page

Report filter page displaying all the filter selections made to run the report. You can hide this section from the report via the filters.

Risk Actions Overview donut graph

Displaying the total list of Risk actions in graph form – Only the risk actions which are overdue or scheduled within the dates selected from the filters (Date TO and FROM).

Risk Actions Summary Graph

A graph for every Directorate, it will display the risk action statuses by Business Unit.

Risk Actions Summary

This section will display all risk actions grouped by Directorate, Business Unit and Risk. The risk actions are further grouped by if they are Overdue (end date has passed and it is not yet completed), or scheduled to be completed (end date is within the date FROM and TO filter).

Directorate

Directorate which the Business Unit is linked to.

Business Unit

The Business Unit which the risk is linked to.

Risk Action Details

Risk ID/Name

Risk Code and Risk Title which the risk actions are linked to.

Solutions/ Risk Action

Risk action title

Responsible Person

Risk Action Responsible person

Status

Risk Action current status

% Complete

Risk Action current % complete

Start Date

Risk Action Start Date

End Date

Risk Action End Date

Due Days

Overdue Risk Actions – the number of days it has been overdue for (YTD) – Flagged red.

Scheduled Risk Actions – How many days until the risk action is due to be completed (YTD) – Flagged Blue.

Report example output:

9. Risk Executive Report

This report will display an overview of risks and risk action information grouped by risk type. The report will contain a Risk Graph, Risk Matrix Graph and the Risk Details and linked Risk Actions (solutions).

FILTERS

FILTERS

Filter

Description

Directorate

Dropdown lists the available Directorates within the organisation and must filter the risks accordingly to the Directorate selected by the user.

Business Unit

Dropdown that lists the Business Unit within the organisation and must filter the risks accordingly to the Business Unit selected by the User.

Responsible Officer

Lists all active staff members of the organisation. Must allow the user to filter the report content where the selected staff member is the responsible officer for the Risk.

Risk Type

Allows the user to select the type of risk and filter the report content accordingly (Strategic/Operational/Project)

Risk Category

Lists the Categories of the Organisation and must filter the report content accordingly to the risk Category selected by the User.

Include Secondary Resp. Person

Applied the below 2 functionalities, when ticked:

  1. Displays the secondary responsible person for a risk.

  2. When filtering by responsible officer, it considers staff members who are linked as secondary responsible officers for risks as well.

Organisational Risk Summary

Displays the 'Organisational Risk Summary' section, when ticked.

Show Risk Details

Displays the 'Risk Details' section, when ticked.

Risk Level

Allows the user to select the risk assessment level and filter the report content accordingly (Initial/Current/Future).

Risk Rating Type

Displays the risk ratings within the system and allows the user filter the report content accordingly.

Show Risk Review Comments

Displays the ‘Risk Review Comments’ section when ticked.

Show Filter Page

Displays the ‘Filter Page’ when ticked.

RISK DETAILS

RISK DETAILS

Report Element

Description

Cover Page

Displays a cover page with the title and client logo.

Filter Page

Displays the filter page which contains all of the selected filters.

Organisational Risk Summary

Displays a column graph of risk level Vs Risk Rating type (number of risks in Extreme, high, Moderate and low).

Risk Heat Maps

Displays a heat map for Initial, Current and Future Assessment for all risks. It will show the number of risks which fall into the specific risk rating areas of the heat map based on their likelihood and consequence calculation.

Operation Risk Details

Risk Code

Risk Code

Risk

Risk Title

Responsible Officer

Risk responsible Officer

Risk Category

Risk Primary Category

Last Reviewed

The last reviewed date (when the risk review was updated and saved)

Issue Type

The Risk type (Threat, Weakness, Opportunity or Strength)

Risk treatment

The Risk Treatment selection

Initial Rating

Initial risk assessment rating (as per the calculation defined in Risk Calculation Settings). The Date is the date which this rating was last updated.

Revised Rating

Revised/Current risk assessment rating (as per the calculation defined in Risk Calculation Settings). The Date is the date which this rating was last updated.

Future Rating

Future risk assessment rating (as per the calculation defined in Risk Calculation Settings). The Date is the date which this rating was last updated.

Overall Effectiveness of Controls

Effectiveness of controls selection within the Revised risk assessment (or whichever assessment this is rated – if applicable).

Causes

Risk Causes field

Consequences

Risk Consequences field

Risk Actions

Risk Action

Risk Action Title

Responsible Person

Risk Action Responsible Person

Progress

% Complete

Due Date

Risk Action due date

Start Date

Risk action start date

End Date

Risk Action end date

Comments

Risk Action Progress Comments

Report example output:

10. Risk Professional System Administration Report

This report shows details of all risk information only if the risk is modified for certain fields. The data will include Date Printed, Change/Update and User ID of the user who made the change/update. The report will show that it has been modified but will not actually show what the modification actually is. It is only a certain number of risk fields that are currently being tracked in order for the risk to be recorded as modified within this report (see below the fields). If any of those tracked fields are modified, then the report will display that this risk has been modified at this time, by the user:

The risk assessment fields are:

  • Reporting Officer

  • Risk Identifiers

  • Risk Identified

  • Risk Issue

  • Risk Type

  • Causes

  • Consequences

  • Existing Controls

  • Future Controls

  • Next Review Date

  • Review Frequency

  • Solution

  • Secondary Resp. Officer

  • Upload Document

  • Hyperlink

The report can be filtered by Directorate, Business Unit and Risk Type (Strategic, Operational or Project).

FILTERS

FILTERS

Filter

Description

Directorate

Dropdown allows selection of the Directorate.' Show All' is selected by default.

Business Unit

Dropdown allows selection of the Business Units. When a Directorate is selected above, the page refreshes and this filter only shows the Business Unit within that particular Directorate. 'Show All' is selected by default.

Team

Not Applicable

Risk Type

Dropdown allows selection of a Risk Type. (Defined at the Risk creation ) 'Show All' is selected by default.

REPORT DETAILS

REPORT DETAILS

Report Element

Description

Directorate

Directorate selected by the user.

Business Unit

Business Unit selected by the user.

Risk Code

Unique risk code for each risk.

Risk Issue

Risk Title

User

Username of the user who made the changes to the stated Risk record.

Action

Displays that a change (Modify only) has been made to the record.

Time Stamp

Date and time of that record being saved to the database. This is taken from the system date and time of the computer.

Report example output:

11. Risk Status Report

This report enables you to view the status of Risks and Risk Actions. The report contains 3 sections as follows:

Risk Matrix – Risk matrix which depicts the number of risks against the risk criteria used in determining the overall Risk rating (The 2 criteria are limited to Likelihood and Consequence).

Risk Matrix Summary – A table which lists the risks relevant for each cell within the risk matrix. Table will be grouped by risk ratings within the matrix.

Risk Status – This section lists the risk rating criteria and risk ratings applicable for each assessment level of the risk. Additionally it displays a table on risk action information.

The following filters will be available.

FILTERS

FILTERS

Filter

Description

Risk Type

This will allow the user to select the type of risk & filter the report content accordingly. Default to ‘Show All’.

Directorate

Lists the available Directorate within the organisation and must filter the report content according to the Directorate selected by the user. Default to ‘Show All’.

Business Unit

Lists the available Business Units within the Organisation. Default to ‘Show All’.

Category

Lists the Categories of the risks and will filter the report content according to the Risk Category selected by the user. Default to ‘Show All’.

Responsible Officer

Lists all active staff members of the Organisation. Would allow the user to filter the report content where the selected staff member is the primary responsible officer for the risk. Default to ‘Show All’.

Risk Treatment

Lists the Risk Treatment types available within the Organisation and will filter the report content according to the Risk Treatment selected by the user. Default to ‘Show All’.

Risk Level

Lists the risk assessment levels available within the Organisation and will filter the report content according to the Risk assessment level selected by the user (i.e. Inherent Risk Assessment, Residual Risk Assessment). Default to ‘Show All’.

When Risk Level is selected as ‘Show All’ the risk matrix section must display matrix each for all available assessment levels. If a specific risk level is selected (i.e. Residual Risk Assessment), the report must only display one matrix only for the selected level.

Risk Status

Will allow the user to filter the report content by the status of risks. Default to ‘Active’.

Risk Rating

This allows the user to select one or more risk ratings at the same time in order to filter risks (i.e. Extreme, High, Low etc.).

3 filter controls will appear for each risk assessment level respectively (i.e. Risk Rating Initial, Risk Rating Current, and Risk Rating Future).

Show Matrix

Will display the ‘Risk Matrix’ section when ticked. Un-ticked by default.

Show Risk Details

Will display the detailed risk section when ticked. Ticked by default.

Show Risk Review Comments

Will display the risk review comments section when ticked. Ticked by default.

X axis

This dropdown lists the risk rating criteria available for the organisation. Allows the user to select the risk rating criteria to be displayed along the ‘X’ axis of the Risk matrix.

Y axis

This dropdown lists the risk rating criteria available for the organisation. Allows the user to select the risk rating criteria to be displayed along the ‘Y’ axis of the Risk matrix.

Action

Dropdown allows selection of a Name of the Action that a project risk has been created for. 'Show All' is selected by default. Only applicable to Project Risks.