Enterprise risk on one taxonomy, from the register to the board.

My work comes first, then the groups below, and only those groups start open. The All sections switch brings back the full order. A job family only arranges the sidebar, and your permissions still decide which items you see.

• 01Risk. Risk register · Assessments · KRIs · Appetite · Exceptions · Loss events · Emerging risks · Decision register
• 02Exams & regulatory change. Exam prep · Supervisory actions · Reg updates · Enforcement radar · Enforcement tracker · Launch delta

The dashboard shows Needs your attention, Overdue & at-risk, Approvals queue, Findings tracker, Framework health and Recent activity. Your role still caps that set, and a panel you do not get is left out rather than shown as a zero.

• Risk management→
• Third-party risk→
• Approvals & authority→
• Board & governance→

A job family never grants a permission, and it never changes the price. What you can approve comes from your role, and people in this family usually hold one of the roles below.

• 01Risk Approver. The Risk Approver role approves risk acceptances, control effectiveness, finding closures, policies, mappings and routing decisions. It does not hold the owner’s write set, settings or examiner grants.
• 02Compliance Analyst. The Compliance Analyst role writes drafts, findings, risk, controls and third-party records, but it approves nothing.

Whatever the role, the person who submits a decision cannot approve it. The only exception is a decision that no one else in your institution can approve. The submitter may then approve it with a recorded justification, and that override is audited. See Roles and permissions for the full model.