Page tree
Skip to end of metadata
Go to start of metadata


The purpose of this page is to explain briefly how the RM risk catalog works and the integration with process controls. 


This document is divided on the following topics:

On the risk catalog, you can classify the risks within a catalog containing a clear risk hierarchy. Provides you with a structured view of all risks of your company.

For each risk category, you can:

  • Define individual risk templates. You can use this template when actual risks are created. Risk templates only have drivers and impacts defined for them, but no further data.
  • Carry out reporting, for example, to evaluate the risks per risk category.

  • Assign risks to local PC subprocess and controls.


Inside the Actions button you have options to:

  • Create and delete risk templates and risk categories.

  • View and edit risk template and risk category details.

  • Cut and paste risk categories. (Apply note 2239483 in case that you face validity errors with the cut and paste functionality.)
  • Distribute the objects within PC objects.

Creating the Risk Category

The risk category can be created following the path NWBC → Master Data  Risk Catalog  Create  Risk category

Here you will have the options to:

  • ŸAllow assignment – Determine whether the risk category can be used on risk or not.
  • ŸAnalysis profile –This is maintained inside the "Maintain Analysis Profile" node in transaction SPRO. System default profile can be overwritten here. Follow KBA number 2275832 in case that you face issues with the wrong profile while running risk analysis.
  • ŸLeading forecasting horizon – Important for corporate risk level determination

KRI Template

 On the KRI templates, you can assign the KRI instances you have created to automatically identify risks in business processes and escalate them to risk owners for immediate attention if necessary. ŸOnly KRI instances based on templates specified here can be created.


Consult the SAP Help documentation at the end of this document for further information to create it.

In case that you face issues with the search filter, apply note 2289770.

Risk summary

On the risk summary tab, you can specify the lower and upper limit for each impact level in monetary terms. This will show you the aggregated values and will only display if configured.

Creating the Risk Template

Once you created the risk category, now you will be able to create the risk template.

Risk Instances

Risk Instances tab has no fields ready for input. It displays the risks that were created using this template, so it can only be accessed after you have created at least one risk with this template.
If risks exist, the Open push button enables you to call the risk directly from this tab.
You create risk from the template by copy/reference.

Responses Templates

In the Response Templates tab, you can assign or remove a response template to be used with the risk template. ŸIf a response template is added later after the risk instances exist, then it can be distributed to the already existed risk instance.

Central Controls

In the Central Controls tab, you can assign or remove a control from Process Control to a template. A central control is a control assigned to a central subprocess. A central subprocess and central control can be assigned to different organizations for different regulations.
  • ŸRM/PC integration.
  • ŸBased on the central controls the risk response is created.
  • ŸIf a central control is added later after the risk instances exist, then it can be distributed into risk instances.
  • ŸCentral controls must be manually activated on the risk instance -> they have transformed into a local PC control.

Integration with PC

The above method, we showed how to integrate the RM risks with the PC central controls, now let's check how to use this integration for the other PC objects.

On the Risk Classification tree, choose Actions→Distribute

Once you selected the option to distribute, now you will have the option to configure the task. Here you have the following actions:

  • Distribution method: copy or reference.
  • Activate created risks and created responses.

Now that we configured the task, we can select the targets(Entity) we will use to distribute. 

The last steps are to review and confirm the selected objects.

Risks assigned to the central Sub-Process can be added locally to the organization.

ŸAllow Local Changes defined as “Yes”to assign the Risks to the Organization as “Copy”.

ŸIf other RM risks exist for this Org Unit , they can be added later on.
DISCLAIMER: Image/data in this WIKI is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Related Content

Related Documents

Assigning KRIs to a Risk

Risk Catalog

Creating a Risk Template

Working with Response Templates

Related SAP Notes/KBAs

Risk catalog - performance improvement

Risk catalogue - cut and paste is blocked by validity error 

Analysis Profile is Different When Running Risk Analysis



  • No labels