Executive summary
The executive summary is the entity’s risk position on one screen — for the executive team and the RMC. It reads the entity’s own registers, and those of every entity beneath it, as they stand.
Who uses it: executives and the RMC, for their entity and everything beneath it. See Roles and permissions.
What it shows
Section titled “What it shows”| Part | What it shows |
|---|---|
| Tiles | The headline counts: risks by band, open breaches, losses this month and year-to-date, open and overdue actions |
| Residual heat map | The entity’s residual matrix, coloured by its criteria set — see Heat map |
| Top risks | The highest residual risks, with owner and treatment |
| Filing status | Each entity’s RCSA filing status for the period, with days overdue |
| Losses by category | Validated losses by risk category and by month |
| Monthly loss reports | Which entities have filed their month or a nil return, and which have not |
| KRI status | Indicators by band, with Red first |
| Open actions | Action items by source, owner and age |
| BIA readiness | Critical activities covered by an approved BIA, and approvals falling due |
Using it
Section titled “Using it”- Open the executive summary.
- Choose the company and the reporting period.
- Open any part to see the records behind it.
What the system does or refuses
Section titled “What the system does or refuses”- Every figure is computed from the registers — see Computed, never typed.
- A parent’s summary counts a subsidiary’s records only once reported up — losses once validated, filings once approved. See Reported-Then-Visible.
- The summary is read-only. Acting on a record happens in the register, by the role that may act.