Requirement:
Each risk that is identified in the organization needs to be tracked and performance scored.
Compliance Metrics:
Metrics are setup to monitor and assess the performance of business unit within the organization as it relates to the identified risk. At the end of each period a score is given based on business rules that are set by the risk management group.