The Overall Risk Picture brings every in-scope unit together. Open it from Assessment → Overall Risk Picture.
Filters
At the top: residual or inherent, risk type, jurisdiction, governing body, and outside appetite only. Click a heat map square to narrow everything to the units in it.
What it shows, top to bottom
Headline numbers - units in scope, High count, outside appetite, the average reduction from controls, controls confirmed effective, and units out of date (not assessed for over a year).
Heat map - a 5 × 5 grid of impact against likelihood.
What the controls do - inherent against residual bands, and the units where controls take off the most.
Residual risk over time - bands by quarter, with the outside-appetite line. See Snapshots and trends.
By risk type - average severity from inherent to residual, against your appetite.
Top risks - your ten highest, with how much controls take off and the movement since last cycle.
Needs attention - units getting worse, resting on a single control, with controls not confirmed effective, or out of date.
By governing body - what each regulator would see if it asked.
Proven only
Switch on Proven only to see residual risk counting only controls that testing has proven. The gap between the two is how much of your risk picture rests on belief rather than evidence. See The Assurance Picture.
Good to know
"Getting worse" means a move up a band, or a rise of more than 1,000.
Units marked not applicable aren't counted; the page says how many were left out.