Assessment details

Update Exposure, Control maturity, and Risk for the selected category. Priority is always calculated from those three inputs.

Selected assessment
Category

Regulatory Compliance

Assessment inputs
Exposure
Suggested: High
Differs from suggestion
Control maturity
Suggested: Weak
Differs from suggestion
Risk
Suggested: Medium
Resulting priority
Watchlist

Priority is calculated from the current Exposure, Control maturity, and Risk selections.

Assessment rationale
Why suggested?
  • Lower-level units show elevated exposure
  • Control maturity is weaker in one or more lower-level units
  • Assessment differs across lower-level units
Based on lower-level assessments
Operations
Division
ExposureVery high
ControlStrong
RiskMedium
Service Delivery
Department
ExposureHigh
ControlWeak
RiskMedium
Technology
Department
ExposureHigh
ControlStrong
RiskLow