Specification · v1.0

Live Dashboard Engine Specification.

Turn the Centre's static dashboard catalogue into a live engine that ingests user data, computes KPIs, scores maturity and appetite, and renders board-, executive- and admin-grade views.

Launch now
  • Dashboard catalogue as static/overview pages
  • KPI card definitions, formulas, thresholds, RAG logic
  • Downloadable dashboard templates (XLSX)
  • Sample/demo dashboard views
  • “See a sample report” CTA
Deferred
  • · Live data ingestion & KPI calculation
  • · Real-time refresh & alerting
  • · User-specific persistence & trending
  • · Appetite/KRI live engines
  • · Org aggregation & board roll-up
  • · Benchmarking against peer data

Live calculation, real-time refresh, persistence and benchmarking are deferred per the approved engine specification.

User types

Board / NED

Top risks vs appetite, resilience, assurance — read-only, summarised

Executive / CRO / CFO

Full profile, KRIs, drill-down, scenario inputs

Risk team / contributor

Data entry: registers, KRIs, controls, incidents

Admin

Configuration of limits, thresholds, users, entitlements

Modules
Maturity trackingRisk appetite trackingKRI monitoringControl assuranceIncident trackingLoss trackingHeat mapBoard reportingImplementation status
Required inputs

Risk register entries

Fields

  • · risk_id
  • · category
  • · likelihood_1_5
  • · impact_1_5
  • · controls
  • · control_effectiveness
  • · residual_likelihood
  • · residual_impact
  • · treatment
  • · owner
  • · status

KRI readings

Fields

  • · kri_id
  • · risk_type
  • · metric
  • · limit
  • · direction(min|max)
  • · current_value
  • · period

Controls

Fields

  • · control_id
  • · linked_risk
  • · design_rating
  • · operating_rating
  • · last_tested
  • · owner

Incidents

Fields

  • · incident_id
  • · date_identified
  • · category
  • · severity
  • · status
  • · date_resolved
  • · root_cause
  • · action

Assessment responses

Fields

  • · assessment_id
  • · domain
  • · indicator_id
  • · score_1_5
Scoring logic

Maturity · For each assessment domain: domain_score = avg(indicator scores) * 20. Overall = weighted mean of domain scores (0-100). Band via maturity spine (Fragile 0-40, Functional 41-55, Disciplined 56-70, Strategic 71-85, Resilient 86-100).

Risk score · inherent = likelihood * impact (1-25); residual = residual_likelihood * residual_impact. Rating: Critical 15-25, High 9-14, Medium 4-8, Low 1-3.

Appetite logic

Utilisation · For max-type limits: utilisation = current_value / limit (0 if limit=0 and current=0). For min-type limits: utilisation = limit / current_value.

RAG · GREEN if utilisation < 0.9; AMBER if 0.9 <= utilisation <= 1.0; RED if utilisation > 1.0 (breach).

Zero tolerance · If limit = 0 (max-type): GREEN when current = 0, RED when current > 0.

Views

board

  • Top risks vs appetite (RAG)
  • Risks over appetite (count)
  • Resilience readiness
  • Assurance coverage
  • Maturity index trend
  • Decisions/escalations

executive

  • Full risk profile & heat map
  • All KRIs with RAG & trend
  • Control effectiveness
  • Incidents & losses
  • Appetite utilisation by type
  • Drill-down to register

admin

  • Limit & threshold configuration
  • User & entitlement management
  • Assessment/domain weightings
  • Data sources & periods
  • Audit log
Build phases
Phase 1Static & templates (launch now)

Render dashboard catalogue as overview content; KPI card definitions, thresholds, RAG logic; downloadable XLSX templates; sample/demo views

Phase 2Personal engine

Authenticated data entry (registers, KRIs, controls, incidents); KPI computation; personal dashboards; export

Phase 3Assessment & appetite scoring

Assessment runs → maturity index; appetite utilisation & RAG; KRI breach escalation

Phase 4Enterprise & board

Org aggregation, board view, entitlements, admin config

Phase 5Benchmarking & intelligence

Anonymised benchmarks, peer comparison, trend intelligence