Regulatory Reporting

Weighted sum of all seven factors under the lead-domain weight profile. Full breakdown in the score explanation panel.

A weighted sum of all seven factors, using the weight profile for the entity's lead domain. Each profile's weights sum to 1, so the result stays on a 0–100 scale. This is the number the annual plan ranks by, and the one the score explanation panel breaks down factor by factor.

Example: Under the IT profile, inherent risk carries 20% weight, so an entity scoring 80 there contributes 80 x 0.20 = 16 points; the other six factors add their own weighted shares to make the total.

Lead domain OPS · model v1

35% issue pressure + 35% cyber exposure + 30% control weakness.

35% issue pressure, 35% cyber exposure, 30% control weakness — the three factors that move fastest. An entity can sit low on annual priority and still score high here, and that gap is the signal to pull work forward rather than wait for the next planning cycle.

Example: Issue pressure 60, cyber exposure 80, control weakness 40 gives (0.35 x 60) + (0.35 x 80) + (0.30 x 40) = 21 + 28 + 12 = 61.

Lead domain OPS · model v1

45% strategic overlay + 35% data & AI risk + 20% time since last audit.

45% strategic overlay, 35% data & AI risk, 20% time since last audit. It favours entities that are changing or breaking new ground, where advice while decisions are still open is worth more than assurance delivered after the fact.

Example: Strategic overlay 80, data & AI risk 80, time since audit 40 gives (0.45 x 80) + (0.35 x 80) + (0.20 x 40) = 36 + 28 + 8 = 72.

Lead domain OPS · model v1

100 minus (60% time since audit + 20% issue pressure + 20% control weakness). Higher means stronger recent assurance.

The one score where high is good. It starts at 100 and subtracts 60% of time since last audit, 20% of issue pressure, and 20% of control weakness. A long gap since the last audit pulls it down fastest, so a low number means thin recent assurance rather than a bad entity.

Example: Time since audit 30, issue pressure 20, control weakness 25 gives 100 − (18 + 4 + 5) = 73.

Lead domain OPS · model v1