Generate Risk and Security Snapshot Reports

Redwood Platform

Use Risk and Security Snapshot Reports to view the snapshot definitions available to you and generate reports from their configured scope. Each snapshot definition groups one or more business processes and the Oracle-managed or customer-defined algorithms to analyze. It also defines the report's lookback period, schedule, frequency, and stakeholders who can view the snapshot and related reports.

From the list, search or sort snapshot definitions, open a definition to review its details and included algorithms, and run the report from a row action or the Actions menu. After a report runs, download the available output and review its related export and job history.

The generated output is based on the included algorithms and contains recommendation analysis summary information and individual results for each scoped algorithm.

Business benefit

Provide business and control owners with a point-in-time view of risk and security analysis across their scoped processes. Stakeholder-based access lets owners control who can view and manage each snapshot definition and its reports.

Steps to enable and configure

To access Risk and Security Snapshot Reports:

  1. From the Newsfeed home page, open Risk Management.
  2. Select Security Snapshot Report.

Tips and considerations

  • A report run uses the lookback period defined for the snapshot definition.
  • Scheduled definitions run automatically according to their configured schedule and frequency.
  • Snapshot report runs don't update algorithm assurance run history, generate assurance summary reports, or create algorithm tasks.
  • You can't run custom definitions manually or on a schedule when they're in Archived or In Trash status.
  • The existing limit of 5,000 results per algorithm applies.
  • You need at least Edit authorization to generate a report. 

Access requirements

Snapshot definitions use stakeholder security. Stakeholders can be assigned as a snapshot owner, process owner, observer, compliance contact, primary or secondary risk manager, evidence owner, or external auditor, with Assign and Edit, Edit but not Assign, or View Only authorization.

For access details, refer to Risk Management secured record access framework in this What’s New.