workflow
Enterprise Risk Register Lifecycle
Enterprise Risk Register Lifecycle as a decision-aware workflow. This is a standalone recurring instance (quarterly or annual) that runs against the existing Risk item population — the enterprise risk register itself — enriching those Risk items in place rather than recreating a register: per-risk results are written onto the individual Risk items, and cycle-level deliverables attach to the workflow instance's steps. In scope: maintaining the register across the confirmed entities, business units, and risk-taxonomy categories for this cycle — intake and deduplication of new risks, Three-Lines ownership, control and assurance mapping, KRIs, periodic review and escalation, and retirement. Out of scope: any entity, unit, or category not named in this cycle's confirmed scope. It consumes the candidate-risk handoff package from the upstream Risk Register Intake workflow and hands its maintained register, residual positions, and escalations to two downstream workflows — Enterprise Risk Assessment & Portfolio Oversight Cycle (the maintained register, the concentration and correlation flags, and the residual positions) and Risk Appetite Definition & Board Reporting (the above-appetite entries, the escalations, and the acceptances) — rather than duplicating repeated work.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- grc
- department
- risk-management
- lineOfDefense
- monitor
Details
- teams
- risk-management
- domains
- grc
- standards
- coso-erm
- iso-31000
- sourceTemplateId
- workflow-library:grc-enterprise-risk-register-lifecycle
- releaseId
- sha256:c93ca4af1ef0fb0829dc57626fed632b72751eed20f08bb8b59f66e7fa0ac457
- canonicalUrl
- https://workflow-library.com/all/?w=grc-enterprise-risk-register-lifecycle
- capabilities
- mappingStatus
- mapped
- lineOfDefense
- monitor
- controls
- UC-RISK-10
- UC-RISK-09
- UC-RISK-13
- UC-RISK-05
- UC-GOV-38
- roleIntegrity
- activityCount
- 1
- ermPhases
- cross_cutting
- lineRoles
- second
- serviceModes
- administrative
- warnings
Source
No record-specific source URL is provided.
Download workflow template · Release: sha256:c93ca4af1ef0fb0829dc57626fed632b72751eed20f08bb8b59f66e7fa0ac457
Connections
- Enterprise Risk Register Lifecycle oversees UC-RISK-09 — Select, plan, and implement risk treatments
- Enterprise Risk Register Lifecycle operates UC-GOV-38 — Assign and maintain Three Lines accountability by risk activity
- Enterprise Risk Register Lifecycle oversees UC-RISK-13 — Monitor and review risk management performance
- Enterprise Risk Register Lifecycle oversees UC-RISK-10 — Maintain a risk register and report the portfolio view
- Enterprise Risk Register Lifecycle oversees UC-RISK-05 — Communicate and consult with stakeholders on risk