For most risk systems one big selling point is the heat map. It's tidy, it's colorful and in a macabre kind of way, it really energizes management to stare in ore at risks registered in the red zone. For the consultant it is a dream come true and the more they find wrong with a business, the more valuable they seem to become.
Worthy or not, traditional heat maps distort risk reality, they squeeze risk into a two dimensional perspective that makes the reporting process itself as dangerous as it is useful.
Worthy or not, traditional heat maps distort risk reality, they squeeze risk into a two dimensional perspective that makes the reporting process itself as dangerous as it is useful.