Platform / The governance core
Group and multi-entity structure
Each entity has its own leadership, its own operating reality and often its own external scrutiny, and the centre still needs one consolidated view.
What changes
The risk is written once. Each entity carries its own residual, owner and thresholds, and anything not set locally inherits the group view, so the centre gets one consolidated picture.
In detail
There is one record, with the local variance held against each unit: each unit the risk applies to gets its own line, with its own residual position and owner (and, for indicators, thresholds and target). Anything not set locally inherits the group value, so a unit records only where it differs, and nothing is copied to twelve places and maintained in twelve.
A risk that does not apply to a unit has no line for it, so it drops out of that unit's register and pack and does not sit there scored as not applicable. Where a rule tests appetite, it tests every unit's effective figure and names the units that breach, and not a group average that would hide them.
A role can cover one unit or all of them, so an indicator owner responsible for one site sees that site and nothing else, and a group pack and a single unit's pack come from the same engine.
The evidence it leaves behind
A change to a local position is an audit entry like any other, with the entity it applies to, so the trail reads correctly for each unit and for the group. Access and authentication