
Risk maps/process ows
A risk map is an overview of an organization’s processes, busi-
ness units and functions, outlining where key risks lie. As they
are intended as a comprehensive bottom-up tool, they are an
effective way to allocate responsibility and accountability for
risks down to the level of individual line managers. In addi-
tion, they are useful for defining weak points in the chain of
where risk should be managed. However, a potential draw-
back is that, like self-assessments, the data collected is mainly
qualitative and may not be in a form conducive to decision
support for senior managers.
Risk indicators
Unlike the previous two tools, risk ...