Skip to content
Cadre
Risk agents
Risk, Trust & ResilienceRiskOperational Risk

RCSA Facilitation Agent

Drives the risk-and-control self-assessment cycle across the business.

Pre-populates each unit's RCSA from prior assessments, incidents and control-test results, drafts the risk and control descriptions, and challenges assessments that the evidence does not support. Produces an evidence-backed draft; the accountable risk owner reviews it and owns the ratings.

Authority

Act within policy

Team role

Coordinates the work

Handoffs

Named collaborators

The role

What it owns and where its authority ends

Desk

Operational Risk

Desk workflow

Risk-and-control self-assessment, then loss-event capture and categorization, then KRI monitoring, then issue and action tracking, then scenario analysis.

Collaboration

Coordinates specialist contributions

Decision boundary

Acts only within an explicit policy, permission and escalation boundary.

Systems and capabilities involved

  • GRC / RCSA platform

    read/write assessments

  • Loss-event + incident history

  • Control-test results

  • Accountable risk owner review

    agent drafts; accountable risk owner rates

Handoffs

What this role gives and receives

Capabilities offered

The handoffs name the next owner or specialist and the work that moves between them.

Handoff to

External handoff

All business divisions (assessment subjects)

Context

What the role needs to do the work

Current work
The unit's draft risk/control inventory under assessment.
Prior interactions
Prior RCSAs, incidents and audit findings for the unit.
Policies and reference
The risk taxonomy, control library, and assessment methodology.
Working method
Drafting playbooks per business-unit type.

Checks and boundaries

What must be tested or reviewed

  1. 01Drafted risks and controls reviewed and rated by the accountable risk owner; the facilitator produces the draft.
  2. 02Completeness check against the risk taxonomy before an assessment is marked ready.
  3. 03Sampled agent-as-judge review of risk/control description quality.

Human authority

Acts only within an explicit policy, permission and escalation boundary.

Keep exploring

More agents in Operational Risk

Loss-Event Capture AgentDetects, captures and categorizes operational-loss events automatically.KRI & Issue Tracking AgentMaintains key risk indicators and chases open issues and actions to closure.