Reports — OD Risk

Output produced from the assessment. The dashboard below summarises the current state; drill into each report card for the detail. Most reports document the active assessment; the Organisation status report rolls up across every assessment in the group.

Scope

Mittenda Limited

1 of 1 unit · 3 positions

Risk decisions

12 of 176

7% complete

Control assessments

0 covered · 4 partial · 0 gap

Residual exposure

0 L 0 M 0 H

12 risks with no residual rating

Risk applicability mix

Applicable 12 Unsure 0 Not applicable 0

Outstanding action items

High

Medium

Low

12 action items need attention before sign-off

Report classification

Records should consider their sensitivity, including retention and handling. This label appears on the management report cover.

Sensitivity

Retention

Record control

Which revision of this assessment a reader is holding, when your governance treats it as made, and the review cycle you have set. These appear on the management report cover. The platform records what you state here; it does not work any of them out.

Assessment date

The date your governance treats the assessment as made — not when the report was produced.

Revision

Counts issues of the record. Increments when the management report is exported or printed.

Review cycle

The cycle your firm has set, in your own words.

Next review (optional)

Only where you have set a date. A cycle stated as "on material change" has none.

Outputs you produce

The deliverables generated from this assessment — for management, the board and accountable owners to read and sign off. Save as PDF.

Evidence pack

The one-action evidential record for a supervisor or internal audit — obligations in scope, their decided coverage state, and for each accepted finding the reviewer, decision date, rationale and source citations. Save as PDF.

Open

Coverage and gaps

The documentary walk: every in-scope obligation with its verdict or its not-yet-decided state, the gaps leading — what the governing documents provide for, as written, and what nobody can point to. Save as PDF.

Open

Management report

The full audit trail — every obligation in scope, every applicable risk, every control assessment, every residual rating, with owners / reviewers and timestamps. Save as PDF.

Open

Organisation status

The group's posture across every assessment — per-unit RAG, risks above appetite, risk-assessment progress, residual exposure and the sign-off gate, with the criteria-comparability check that decides whether the aggregate is valid.

Open

Register export

Every in-scope risk as a row for the register or GRC tool you already run — band, appetite limit and control assessments, plus your own category, register reference and label for the band where you have recorded them. CSV or JSON.

Open

Responsibilities

Pick a person or role from the dropdown to see every risk and control they own or review, the current status of each, and items outstanding.

Open

Working views

Surfaces you read to do and check the work — registers and maps, not deliverables in themselves.

Risk identification register

Every in-scope risk, whether it is applicable or excluded (with a reason), and the method by which it was identified. Save as PDF or export CSV.

Open

Shared-service concentration

Single points of reliance across the organisation — which entities rely on which shared service, the result version each references, and how a provider re-run fans staleness out along the dependency map.

Open

Traceability lattice

The obligation → risk → control chain for one obligation, drawn as a graph and coloured by decided coverage — expert findings, never match strength. Click any node to open its source.

Open

Dependency map

Which units rely on a shared service or an external provider, and whether each is in good order. What a board should act on is listed under the map.

Open

Audit log

Chronological history of every change captured during this assessment — who decided what, when, and the before/after values.

Open