Assessment: Mittenda Limited IE · Regulation: EU 2023/1113 · Roles: PSP, Intermediary PSP, CASP, Intermediary CASP

Stage 6 — Reporting

ISO 31000:2018 §6.7 — Recording and reporting

The risk management process and its outcomes should be documented and reported through appropriate mechanisms. Recording and reporting aims to communicate risk management activities and outcomes across the organization, provide information for decision-making, and improve risk management activities.

How this app differs from ISO 31000

ISO 31000 says that the process and its outcomes should be documented and reported. This app does not store the management report as a separate record. It builds the report from this assessment's recorded decisions each time you open it. The report's cover states its sensitivity, and its retention period if you have set one.

Record and report the risk-management process and its outcomes. The management report is the audit-trail backup of every decision made across the six stages; sign it off here once it's reviewed. Stage state: In progress

Reporting outputs

Produced from the assessment for Mittenda Limited. 0 of 6 stages approved.

Management report The full audit trail — every decision, every stage, with the process-governance evidence. Save as PDF. Responsibilities Every risk and control a person or role owns or reviews, and what's outstanding. Audit log Chronological history of every change — including each stage's lock / approve / reopen, who and when.

Reporting governance

The factors reporting should consider, plus the recorded-information factors (intended use and context — sensitivity and retention are on the report cover). Unauthored factors render as such on the report rather than implying they were considered.

Not yet authored — the report's governance section will say so.

Reporting sign-off

Review the management report and the other outputs. Lock when the report is final and ready for sign-off.

Sign-off blocked. Final sign-off requires stages 1–5 and the three §6.4 phases approved. Not yet approved: 1 Communication & consultation (In progress); 2 Context (In progress); 3 Risk assessment (In progress); 4 Treatment (In progress); 5 Monitoring & review (In progress); Identification (§6.4.2) (In progress); Analysis (§6.4.3) (In progress); Evaluation (§6.4.4) (In progress).