Executives ask for residual risk dashboards sliced by entity class across the municipal portfolio. What must be true in the entity design?
Select an answer to reveal the explanation.
Short Explanation
Executives want pie slices, not a spaghetti bowl. Classes give the slices—Technology here, Organization there—so residual risk can roll up cleanly. Design the classes for the story the dashboard has to tell.
Full Explanation
Entity classes enable aggregation of risks, controls, and related GRC data for executive reporting. Designing classes with reporting consumers in mind allows residual risk views by Organization, Technology, and similar groupings. Collapsing everything into one class or exporting only to spreadsheets undermines in-platform rollups. Classes are complementary to risk processes, not obstacles to indicators.