Prepare and challenge a first-line Risk & Control Self-Assessment (RCSA): score inherent risk from impact and likelihood, derive control design and operating effectiveness, compute residual risk against appetite, map every credited control conclusion to evidence, surface statement and control challenges, and draft a remediation plan — assembled into a controlled RCSA package template. Use when a first-line risk or operational-risk analyst needs to build, refresh, or challenge an RCSA, map control evidence, score design and operating effectiveness, or track remediation for operational, compliance, or third-party risks. Draft-only decision support: it NEVER signs off, attes…
