Scribd
Upload
73 views2 pages

RASCI Matrix for Risk Management

The document defines roles and responsibilities for managing risk using a RASCI matrix. It shows that the Risk Owner and IT functions are responsible and accountable for implementing the risk program and identifying/assessing risks. The IT Risk Officer is responsible for setting the risk policy and appetite, and monitoring risks. The IT Risk Analyst provides support, and the IT Risk Committee and Board of Directors are accountable and informed at various stages of the risk management process.

Uploaded by

Suleyman S. Gulcan
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as XLSX, PDF, TXT or read online on Scribd
73 views2 pages

RASCI Matrix for Risk Management

The document defines roles and responsibilities for managing risk using a RASCI matrix. It shows that the Risk Owner and IT functions are responsible and accountable for implementing the risk program and identifying/assessing risks. The IT Risk Officer is responsible for setting the risk policy and appetite, and monitoring risks. The IT Risk Analyst provides support, and the IT Risk Committee and Board of Directors are accountable and informed at various stages of the risk management process.

Uploaded by

Suleyman S. Gulcan
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as XLSX, PDF, TXT or read online on Scribd
  • Risk RASCI
  • Risk Management Processes

Risk RASCI

Define and
Process Implement Risk
Program Set Risk Policy

Role
Risk Owner C C
IT Function C C
IT Risk Officer R R
IT Risk Analyst S S
IT Risk Committee A A
Board of Directors I I

Legend
R Responsible - Ensures the work gets done
Acocuntable (approver) - Answerable for
the completion of the work. May be
A required to sign off
S Support - Helps complete task
Consulted - Opinions are sought. Typically
C subject matter experts
I Informed - Kept up-to-date on progress
Risk Identification
Set Risk Appetite and Assessment Risk Response Risk Monitoring

C A A A
C R R R/C
R C C R/C
S S C S
C C C I
A I I I

Risk RASCI Process Set Risk Policy Role Risk Owner C C IT Function C C IT Risk Officer R R IT Risk Analyst S S IT Risk Commit
Set Risk Appetite Risk Response C A A A C R R R/C R C C R/C S S C S C C C I A I I I Risk Identification and Assessment Risk

You might also like