Risk Management
Top Strategic Risks
The ten highest-rated strategic risks ranked by residual score with movement since last quarter.
Why the strategic risk league table matters
Accounting officers and audit committees are required under the MFMA and PFMA to maintain an effective risk management system, and King IV places the governing body squarely on the hook for overseeing the organisation's most material exposures. A ranked view of residual strategic risk is the single artefact that lets oversight bodies confirm the institution is steering attention to what could actually derail service delivery or clean audit outcomes. AuditPro Core surfaces the top ten residual risks with quarter-on-quarter movement so the board can see not just where exposure sits, but whether it is getting better or worse.
The Numbers
AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.
Strategic risks
10
Rising risks
4
▲ since Q2
Stable risks
5
Reducing risks
1
▼ treatment working
Residual score by strategic risk
Strategic risk movement
| Risk | Current | Prior | Trend |
|---|---|---|---|
| Fiscal sustainability | 21 | 18 | ▲ 3 |
| Service delivery | 19 | 19 | ■ 0 |
| Cyber & data | 18 | 15 | ▲ 3 |
| Talent loss | 16 | 17 | ▼ 1 |
| Infrastructure decay | 15 | 13 | ▲ 2 |
Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.
Residual risk score
Residual risk is what remains after existing controls are applied to the inherent exposure. Ranking by residual rather than inherent score keeps oversight focused on risks the institution is not yet adequately managing.
Strategic versus operational risk
Strategic risks threaten the achievement of institutional objectives and mandate, not merely day-to-day operations. They typically require governing-body attention and cannot be delegated entirely to line management.
Movement and velocity
A risk's trajectory over a quarter often matters more than its absolute score. A mid-ranked risk climbing fast can warrant earlier intervention than a higher but stable one.
Risk ownership
Every strategic risk should have a named accountable owner at executive level. Without clear ownership, treatment stalls and the register becomes a compliance artefact rather than a management tool.
How AuditPro Core Bridges the Gap
- Live ranking: the register continuously re-sorts by residual score so the top ten always reflect the current assessment, not a stale quarterly snapshot.
- Movement traceability: each risk carries its prior-period score and direction, with drill-through to the reassessment that caused the shift.
- Owner accountability: risks link to their accountable owner and treatment plans, exposing any strategic risk left unassigned or untreated.
- Audit-ready export: the table exports as a board-pack-grade schedule with scores, movement and rationale for audit committee and AGSA review.
Key Takeaways
- Rank by residual, not inherent, score to focus on inadequately managed exposures.
- Track movement, not just level, to catch fast-deteriorating risks early.
- Confirm every top-ten risk has a named executive owner and active treatment.
- Use the export to evidence governing-body oversight under MFMA, PFMA and King IV.
See This on Your Own Data
AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.