Abstract: Risk mitigation and management is provided through an executive management application for the active management of operational risks, derived from exposure to factors that threaten strategic objectives related to operations, strategy, regulation and recording priorities. This system is based on a architecture that automates the Committee Of Sponsoring Organizations (COSO) framework for enterprise risk management, using the objective, risk, control and actions (ORCA) methodology to actively manage risk at the business unit level. This business process and feedback mechanism actively isolates, evaluates and escalates risks and controls in an interactive, proactive and dynamic manor. Workflow, alerts, messaging and roles and permission profiles route risk information to all relevant entities to ensure enterprise-wide visibility of, for example, a companies overall risk exposure.