Assessment details
Update Exposure, Control maturity, and Risk for the selected category. Priority is always calculated from those three inputs.
Selected assessment
Assessment inputs
Exposure
Differs from suggestion
Control maturity
Risk
Residual risk may be optimistic given very high exposure and only moderate control maturity. Consider whether residual risk should be high or very high, or document why this is justified.
Resulting priority
Elevated
Priority is calculated from the current Exposure, Control maturity, and Risk selections.
Assessment rationale
Why suggested?
- Control maturity is weaker in one or more lower-level units
- Assessment differs across lower-level units
Based on lower-level assessments
Corporate Services
Division