Corporate Risk-Risk Management
I am working with SAP GRC RM and I am creating Corporate Risk, however, it seems I can not quantify the impact/likelihood of the responses I am assigning to the risk. Are the functionality of the Corporate Risk not really focus on the mitigation?
Thomas Frenehard replied
That’s right: unlike Operational Risks, Corporate Risks do not leverage Analysis Profiles where can be activated the “Impact Reduction” option that enables the solution to automatically calculate residual risk on the basis of the mitigation effort assessed by risk response.
Instead, Corporate Risks leverage the Forecasting Horizons where are defined the analysis type (qualitative/quantitative).
Furthermore, please note that Corporate Risks are assessed on a global impact and probability level per Forecasting Horizon, there is no breakdown on impacts as can be the case for Operational Risks.
Thank you and best regards,