Compliance Risk Scoring: Obligations, Inherent vs Residual Risk & Heat Maps
Build an obligations register with due dates, score risks before and after controls, map them on a 5×5 heat map, check them against risk appetite, run privacy deadlines and a breach clock, age open issues and report key risk indicators to the board – 8 hands-on labs at one fictional distributor, with every cell checked as you go.
One-time payment · lifetime access · lessons, labs, exam and certificate included · no subscription.
About this course
In this course you calculate the numbers behind a compliance programme at one fictional distributor. You turn an obligations register into next due dates with EDATE and count what is overdue or due soon. You score risks as likelihood × impact, rate them with approximate XLOOKUP bands and reduce them to residual risk with control ratings. You fill a 5×5 heat map with COUNTIFS and colour its zones, compare residual scores with risk appetite and filter the escalation list. You compute privacy request deadlines and a 72-hour breach clock, age open issues into buckets with IFS and finish with a KRI dashboard with traffic lights and sparklines.
Lessons
- The Obligations Register: Sources, Owners, Frequencies & Next Due Dates Pro
- Inherent Risk: Likelihood × Impact with Scoring Scales Pro
- Residual Risk: Control Effectiveness, Residual Scores & Rating Bands Pro
- The 5×5 Heat Map: Counting Risks per Cell and Colouring the Zones Pro
- Risk Appetite: Limits per Category, Escalation Flags & a Filtered Escalation List Pro
- Privacy Deadlines: Data-Subject Requests and the 72-Hour Breach Clock Pro
- Issues & Remediation: Days Open, Ageing Buckets and the Closure Rate Pro
- Key Risk Indicators: 12-Month Trends, Traffic Lights, Sparklines & a Board Summary Pro