Abstract: A system for aggregating risk data in an enterprise strategy and performance management is provided. The system, in one example embodiment, includes a risk fetching module to obtain risk exposure data, the risk exposure data related to one or more objectives, a risk data parser to determine a first objective from the one or more objectives, a selector to determine source risk exposure values from the risk exposure data, the source risk exposure values being related to the first objective, an aggregator to aggregate the source risk exposure values related to the first objective into an aggregated risk value, and a mapping module to determine a performance goal corresponding to the first objective. A view generator may be provided to generate a combined view to include performance data related to the performance goal and the aggregated risk value.

Abstract: Methods, systems, and computer program products are provided for managing internal controls. Internal control systems and methods are also disclosed that provide a service catalog comprising one or more test services relating to internal applications. In one implementation, a computer-implemented method is provided for testing operating effectiveness of controls for an entity. The method may comprise creating a test plan through a calling application using a service catalog, the test plan identifying controls to be tested using at least one internal application. The method may further comprise uploading control testing results for at least one scheduled test, the testing results being uploaded from the internal application to the service catalog, validating the control testing results at the service catalog, and sending the validated results to the calling application.

Abstract: Computer-implemented methods, systems, and computer program products are provided for the management of internal controls. Embodiments consistent with the invention also relate to internal control systems and methods that provide an interface for uploading or importing test results from one application (e.g., an external application for testing controls) to another application (e.g., an internal control documentation application). In one implementation, a computer-implemented method is provided for testing operating effectiveness of controls for a company. The method may comprise creating a test plan, the test plan identifying controls to be tested using an external application and scheduling at least one test with the external application.