Risk & Control Self-Assessment (RCSA) demo
The RCSA becomes an interview: agents propose every rating from the evidence, a Challenger checks it for the second line, and people sign 1:31
What the demo shows
Operational risk teams pre-fill each RCSA from incidents, findings and controls for sign-off
For each risk, an Evidence agent gathers the year's incidents, general ledger losses, card processor recoveries, control tests, audit and exam findings and KRIs, with member details masked. A Prefill agent scores inherent risk, control effectiveness and residual risk on the credit union's own scale and cites every fact. The Interview agent opens a conversation with the process owner, one risk at a time: last year's rating, what changed, the proposal. The owner accepts, changes a rating with a reason code and evidence, or asks. A Challenger agent, acting for the second line, tests every proposal and change against seven rules and raises challenges. The ERM Officer signs every change and decides every challenge; the Report agent drafts the committee memo from signed ratings; the Risk Committee approves the cycle. Between cycles the Cycle agent reopens a signed rating only when its evidence moves.
Transcript
- RCSA, risk and control self-assessment, is how business lines rate their own risks.
- Norrell Federal Credit Union: 186 risks, six thousand incidents a year.
- Here, the RCSA is an interview. The agent speaks first.
- Debit card fraud: 214 incidents, $389,400 lost, a KRI breach, a failed test.
- Every number cites its record; click one to see the source.
- The agents propose High inherent risk; the control needs improvement.
- Owner Dana Whitfield rates the control partially effective: a new rule passed its retest.
- The Challenger checks it for the second line and accepts: residual Moderate, within appetite.
- ERM Officer Naomi Brandt signs. No one signs their own rating.
- Every step is on the audit trail, with an examiner export pack.
- Ratings grounded in evidence, in a cycle aiming to close in six weeks.
- Built on Botminds: agents, data, screens and governance on one platform.
The narration as written for the film. Captions are on the player.