|
Generated from the Designer Tool and structured according to the
risk framework defined in the Designer Tool, End User Assessor Models
are used to conduct detailed assessments across the business.
The End User Models provide users with a management tool to enable
them to identify, assess, treat and monitor the risk profile within
their business area.
Two types of End User Models can be generated from the Designer
Tool, a Simple Fixed Model and a Comprehensive Flexible Model.
The Simple Fixed Model (SFM) provides users with the ability to
assess risk according to the corporate framework that was defined
in the Designer Tool. Users have the ability to add new risk and
control information in the SFM, but they cannot alter the underlying
risk area framework that was defined in the Designer Tool. This
ensures consistent application of the framework across the Company.
The Comprehensive Flexible Model (CFM) provides users with the
ability to map the risk framework that was defined in the Designer
Tool against their own unique process structure. This allows users
to use both generic risk definitions and a flexible entity structure.
This gives all of the benefits of a consistent approach, without
impacting on the users' ability to accurately document all instances
of risk within their business units. It also means that users can
report down either the fixed risk category tree that was defined
in the Designer Tool, or their own process tree.
The assessment approach adopted in the End User Models is consistent
with the Australian / New Zealand Risk Management 4360:1999, and
as such supports a three-level risk assessment, inherent risk, controlled
risk, and if required, treated risk.
|