Method and apparatus for managing risk, such as compliance risk, in an organization

摘要

An apparatus for managing risk within an organization includes four modules. An enterprise builder module enables a user to enter and store data regarding one or more reporting entities within the organization. A products and services catalog module enables a user to enter and store data regarding one or more products or services within the organization and to associate each of the one or more products or services with at least one of the one or more reporting entities defined in the enterprise builder module. A compliance obligation inventory module enables a user to enter and store data regarding one or more compliance obligations and to relate each of the one or more compliance obligations to at least one product or service of the one or more products or services defined in the products and services catalog module. A compliance risk assessment module enables a user to conduct a risk assessment for unique combinations of products or services, compliance obligations and reporting units; aggregate risk assessments over an entire reporting unit; and consolidate risk assessments over multiple reporting units.