Skip to content

Reporting periods and roll-forward

RCSA runs in reporting periods. The group opens each year once, at the group root, so every entity in the group assesses on the same cycle. At the end of a cycle each entity rolls its register forward into the next one.

Who may do it: the Group RM opens the year, acting at the group root. The Entity Risk Manager rolls forward the register of their own entity. See Roles and permissions.

  1. Sign in with your Group RM role and choose the group root.
  2. Open the new year.
  3. Every entity beneath the root now works in that period.

The year also sets the period for filing status: the executive summary shows which entities have submitted and how many days a filing is overdue. See Dashboards and reporting.

  1. Open your entity’s risk register for the cycle that is ending.
  2. Roll forward into the next cycle.
  3. The system copies the risks, their scores and their controls into the new cycle, where the Risk Champions update them and the filing runs through submission and sign-off again.

The approved filing of the earlier cycle, and its snapshot, stay as they were.

  • Only the group root opens a year. An entity below the root cannot open one.
  • Each entity rolls forward its own register. A parent cannot roll forward a subsidiary’s register. See Subsidiary-Independence.
  • Every act is stamped with who and when. See Who-filed is stamped.