Value chain risk management under an enforceable undertaking

Senior solution architect across APRA enforceable undertaking remediation, spanning controls, value chain risk, obligations management, breach reporting, internal reviews and risk data governance. Led multiple workstreams within solution design across those streams.

Recognised as a 2021 Risk Awards winner by the Chief Risk Officer, for contribution to Value Chain Risk Management.

Value chain risk management depends on process information, and process information does not sit in the GRC platform. The design covered both the target model and the means of populating it: bringing the process data across from the system that held it, and the corresponding risk and control information in from spreadsheets.

A separate piece of work reviewed, completed and automated the testing of an operational risk critical data element control report within a week, improving assurance visibility and audit readiness.