Abstract: A computer system analyzing a risk by identifying and assessing the risks, determining the disposition of the risks, monitoring and mitigating the risks, and reporting the risk items across an information technology system. A risk assessment tool may map known risk items into a risk framework as well as map risk categories between different risk frameworks. The risk management tool may also identify a root cause through a defined root cause dictionary based on an identified risk or the associated risk category of the identified risk. This capability may enable a user to analyze end-to-end operations, particularly where the main areas of risk are and where new controls or modified existing controls should be implemented. The risk management tool may also provide risk assessment reports that that are expressed in a common risk language with operations associates, with internal auditors, external auditors and regulatory bodies, and with government agencies.

Abstract: A computer system analyzing a risk by identifying and assessing the risks, determining the disposition of the risks, monitoring and mitigating the risks, and reporting the risk items across an information technology system. A risk assessment tool may map known risk items into a risk framework as well as map risk categories between different risk frameworks. The risk management tool may also identify a root cause through a defined root cause dictionary based on an identified risk or the associated risk category of the identified risk. This capability may enable a user to analyze end-to-end operations, particularly where the main areas of risk are and where new controls or modified existing controls should be implemented. The risk management tool may also provide risk assessment reports that that are expressed in a common risk language with operations associates, with internal auditors, external auditors and regulatory bodies, and with government agencies.