Risk Profile
What is Risk Profile?
A comprehensive description of an organization's overall risk exposure, including the types, levels, and distribution of risks across the enterprise.
Terms that appear alongside risk profile
Each of these is named in at least one of the same controls as risk profile. The number is how many controls name both.
- governance 8 shared controls
- risk management framework 8 shared controls
- operational risk 7 shared controls
- compliance 5 shared controls
- policy 5 shared controls
- risk assessment 5 shared controls
- audit 4 shared controls
- remediation 3 shared controls
Frameworks that govern risk profile
What the standards actually require on risk profile
Requirements naming risk profile across 6 standards, quoted from the control text.
L0 applies where no MOD Identifiable Information is processed and no additional cyber controls beyond standard contract terms are required.
DEFSTAN-L0 · Risk Profile L0 Not Applicable →As part of business and strategic planning the entity must assess the impact of its business and strategic decisions on its operational risk profile and operational resilience, including the impact of new products, services, geographies and technologies.
CPS230-P26 · Assessment of Business and Strategic Decisions on the Risk Profile →Description of each risk category, risk exposure, concentration, mitigation, and sensitivity analysis. Stress testing and scenario results.
SII-P3-07 · SFCR Section C: Risk Profile →Score inherent risk arising from online and mobile delivery channels including ATM operations and number of customers served.
FFIEC-CAT-IRP-2 · Inherent Risk Profile - Delivery Channels →The institution must designate a person as Chief Risk Officer responsible for the risk management function, who must be involved in and have authority to effectively challenge activities and decisions that could materially affect the institution risk profile.
CPS220-09 · Designation of a Chief Risk Officer →Determine scope and applicability of the OCC Heightened Standards per 12 CFR Part 30 Appendix D Section I and the OCC Heightened Standards for Large Banks final rule (effective November 2014 + revisions).
OCCHS-1 · Scope, Applicability, and Definitions of Heightened Standards →Questions people ask about risk profile
What is Risk Profile?
Why is Risk Profile important for compliance?
Which compliance frameworks address Risk Profile?
Where can I learn more about Risk Profile?
See how Risk Profile applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.