The second report, the “Workshop Summary Report” is designed to summarise the activity undertaken in the initial Risk Profiling workshop; in the past, this tended to have to be done “off-line” on Word. The report uses “boiler plate” text to wrap around data taken from the completed Risk Profile such as:
▪Number of risks;
▪Number of controls;
▪Number of Key controls;
▪Control gap and the major risks contributing to it;
▪Graphical representation of risks with the potential to breach the documented Risk Appetite;
▪Details of agreed upon remedial action;
▪A full list of risks.
