Codes, statuses and values
Every code, status and fixed value a user meets in Risk Core, in one place, each linked to the page that explains it. Codes are issued by the system, and tiers, bands and statuses are derived by it: none of them is typed.
| Record | Format | Issued | Explained in |
|---|---|---|---|
| Risk | CM-RISK-2026-001 | When the risk is first saved | Risk register |
| Loss event | LE-2026-0001 | When the event is first saved | Recording a loss event |
| KRI | KRI-CM-001 | When the indicator is first saved | KRI library |
A code cannot be typed or changed.
RCSA filing statuses
Section titled “RCSA filing statuses”| Status | Means | Moves to |
|---|---|---|
| Draft | The Risk Champion is preparing the filing; its risks can be edited | Submitted |
| Submitted | Sent for review; its risks are locked | Reviewed or Returned |
| Reviewed | Passed by the Reviewer; waits for the Approver | Approved or Returned |
| Approved | Signed off; a snapshot of what was approved is recorded, and the heat map, dashboards and report-up read it | Draft, when the entity’s own Entity Risk Manager reopens it |
| Returned | Sent back to the Risk Champion with a reason; editable again | Submitted |
Explained in Submission and sign-off.
Loss event statuses
Section titled “Loss event statuses”| Status | Means |
|---|---|
| Draft | Being completed by the first line; seen only inside the entity |
| Submitted to Risk Management | Complete and sent for validation |
| Under review by Risk Management | The Entity Risk Manager is checking it |
| Returned for more information | Sent back to the reporter, then submitted again |
| Validated — in the loss data set | Accepted by the entity’s Entity Risk Manager; validator stamped; reported up |
| Rejected — not an operational risk event | Not accepted, with the reason; left out of the data set and the monthly report; not reported up |
| Closed | Handling finished; stays reported up |
Explained in Validation and visibility.
Materiality tiers
Section titled “Materiality tiers”| Tier | Routed to |
|---|---|
| Tier 1 | The Risk Champion |
| Tier 2 | The route the group sets |
| Tier 3 | The RMC and the board |
The tier is computed from the event’s latest position against the group’s thresholds. Explained in Materiality tiers.
KRI bands
Section titled “KRI bands”| Band | Means |
|---|---|
| Green | Within appetite |
| Amber | Approaching the limit — an early warning |
| Red | Outside appetite — a breach; an explanation is required and an action item is created |
Explained in Thresholds and Observations and breaches.
Criticality tiers
Section titled “Criticality tiers”A critical activity’s criticality tier is computed from its MTPD against the MTPD bands the group root sets. The bands, and so the tiers, are group configuration and mean the same thing in every company of the group. Explained in Critical activities and Group configuration.
BCP levels
Section titled “BCP levels”| Level | Means | Recorded in ERM Core as KRI band |
|---|---|---|
| Normal | No incident is open for this hazard | Green |
| Standby | The hazard is expected; prepare | Amber |
| Activated | The plan is in force | Red |
| Closed | The incident is over; a draft loss event is created | — |
Every change of level is pushed to every staff phone. Explained in BCP levels and External KRIs from BCP Core.
Basel event types
Section titled “Basel event types”| Code | Level-1 event type |
|---|---|
| EL01 | Internal fraud |
| EL02 | External fraud |
| EL03 | Employment practices and workplace safety |
| EL04 | Clients, products and business practices |
| EL05 | Damage to physical assets |
| EL06 | Business disruption and system failures |
| EL07 | Execution, delivery and process management |
Explained in Standards mapping.
Check-in and work status
Section titled “Check-in and work status”| Value | Means |
|---|---|
| Safe | You are safe |
| Affected | You are safe but affected, for example water near your home or no way to travel |
| Need help | You need help now |
| Not reported | No check-in yet; team heads and HR see who has not reported — see Team and unit status |
| Work status | Means |
|---|---|
| In office | Working at the office today |
| Working from home | Working from home today |
| Unable to work | Cannot work today |
| On leave | On leave today |
Explained in Check-in and Work status.
Main values in 1 Core System
Section titled “Main values in 1 Core System”| Value | Values | Explained in |
|---|---|---|
| Customer risk level | Low · Medium · High | Risk scoring and adjustment |
| Approval route | Low and Medium: Maker → Checker · High: Maker → Checker → Approver | New-customer approval |
| Restriction modes | FULL LOCK · FULL ASSET FREEZE · EXIT-ONLY | Restrictions and orders |
| Agent Core period | OPEN → FROZEN → APPROVED → PAID | Period close, payout and tax |