It is tempting to bring a detailed heat map to an executive meeting and walk through every dot. It rarely works. Directors think in strategy, capital and trade-offs, so risk reporting has to speak that language — something my Executive MBA studies reinforced.
Three questions every report should answer
- What changed since last quarter? New, rising and falling risks — not the whole register.
- Are we within appetite? Each top risk shown against the tolerance the board agreed.
- What do you need from us? A clear decision: accept, fund treatment, or change appetite.
Let KRIs carry the story
Key risk indicators turn opinion into trend. “On-time remediation rose from 62% to 91%” says more about control health than any colour on a chart, and it invites the right follow-up questions.
The goal is not to show how much work the GRC team did. It is to help the people at the top of the organization make a better decision in the ten minutes they have for this agenda item.