Risk Dashboard & Heat Maps Flashcards
7 cards from real CRA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Risk Dashboard & Heat Maps flashcards as text
A risk dashboard reports KRIs for operational, financial, and strategic risk categories. Which dashboard feature ensures decision-makers focus on the most critical items first?
Answer: Exception-based reporting that surfaces only out-of-tolerance indicators at the top
Exception-based reporting draws immediate attention to indicators that have breached or are approaching thresholds, supporting faster and more targeted decisions.
Why might a risk practitioner use logarithmic scales on a risk heat map instead of linear scales?
Answer: To better represent extreme tail risks where impact differences are orders of magnitude apart
Logarithmic scales compress large ranges, making it easier to visually distinguish between risks whose impacts differ by orders of magnitude (e.g., $1M vs $1B).
What role does a risk dashboard play in the 'Three Lines of Defense' model?
Answer: It provides transparent, real-time risk information that supports monitoring by the first, second, and third lines
A well-designed dashboard serves all three lines by giving each visibility into risk exposures relevant to their oversight responsibilities.
When a heat map shows many risks clustered in the upper-right quadrant, what does this most likely signal?
Answer: The organization faces a high concentration of high-likelihood, high-impact risks requiring urgent attention
Upper-right clustering (high likelihood and high impact) indicates significant unmitigated exposures that demand prioritized management action.
Which practice best ensures that risk dashboard information remains actionable rather than purely decorative?
Answer: Linking each dashboard indicator to specific owners, response plans, and review dates
Tying each indicator to an owner, a response plan, and a review date transforms the dashboard from an informational display into a management tool.
A heat map that displays both inherent and residual risk positions for each risk is sometimes called a what?
Answer: Control effectiveness map or dual-position heat map
A dual-position or control effectiveness heat map plots each risk twice—once at its inherent position and once at its residual position—visually demonstrating the value added by controls.
Which metric on a risk dashboard would best help a CRA assess whether the risk management budget is being allocated efficiently?
Answer: Cost of controls relative to the reduction in residual risk exposure achieved
Comparing control costs against the risk exposure reduction they deliver is the core metric for evaluating the return on risk management investment.