City council asks for risk reporting they can act on. Why is a dump of 500 raw risk rows the wrong architecture?
Select an answer to reveal the explanation.
Short Explanation
Five hundred raw rows is a haystack, not a brief. Council needs rollups by entity class and framework theme so they can steer. Hiding residual forever or only showing closed audits is not better reporting—it is less.
Full Explanation
IRM reporting architecture aggregates risks by dimensions such as entity class and framework category to support governance audiences. Unfiltered row dumps obscure priorities. Policies that hide residual from oversight or restrict reporting to closed audits alone undercut decision-useful risk communication.