Operational risk and control analysis of an organization

Non-transitory computer readable medium comprising logic, the logic, when executed by a processor, operable to:

• receive a plurality of key risks, wherein the plurality of key risks identify operational risks of an organization;
• receive a plurality of sets of data from a plurality of data providers, wherein the plurality of the sets of data comprise information associated with a plurality of business units in the organization;
• associate each set of data with a key risk;
• compile the plurality of the sets of data based on the key risk;
• quantify the compiled data, wherein quantifying the integrated data comprises weighting the compiled data according to the key risk;
• and
• store the quantified data to facilitate risk analysis.

A method, comprising:

• receiving a plurality of key risks, wherein the plurality of key risks identify operational risks of an organization;
• receiving a plurality of sets of data from a plurality of data providers, wherein the plurality of the sets of data comprise information associated with a plurality of business units in the organization;
• associating, by a processor, each set of data with a key risk;
• compiling the plurality of the sets of data based on the key risk;
• quantifying, by the processor, the compiled data, wherein quantifying the integrated data comprises weighting the compiled data according to the key risk;
• and
• storing the quantified data to facilitate risk analysis.