> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flowx.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Risk Dashboard

> Six-dimensional risk scoring per app, rolled up to the org for leadership visibility.

The Risk Dashboard answers one question: where in our AI portfolio should we focus first? Each app gets a score across six dimensions; the dashboard rolls those into a single number per app and an aggregate per org.

***

## The six dimensions

| Dimension | What it measures |
| - | - |
| **Operational risk** | Error rate, latency stability, drift events. |
| **Compliance risk** | Open compliance gaps weighted by framework severity. |
| **Policy risk** | Policy violations weighted by severity. |
| **Data risk** | Sensitivity of data the app handles and exposure. |
| **Model risk** | Model maturity, provider concentration, vendor dependencies. |
| **Governance risk** | Stale assessments, missing evidence, owner gaps. |

Each dimension scores 0–100. The composite is a weighted average; weights are configurable per org.

***

## How scores update

Scores recompute whenever the inputs change:

```mermaid theme={"dark"}
flowchart LR
    Telemetry["Telemetry<br/>(runs, drift, alerts)"] --> Op[Operational]
    Policies[Policy evaluations] --> Pol[Policy]
    Compliance[Compliance evaluations] --> Comp[Compliance]
    Registry["AI Registry<br/>(model, data tags)"] --> Data
    Registry --> Model
    Assessments[Assessments] --> Gov[Governance]
    Evidence[Evidence approvals] --> Gov
    Op & Pol & Comp & Data & Model & Gov --> Composite[Composite score]
```

Telemetry inputs update minute-by-minute. Governance inputs (assessments, evidence) update on submit.

***

## Reading the dashboard

**1. Start at the org roll-up**

Top card shows the org-wide composite plus distribution across the six dimensions. Spikes are where to look first.

**2. Pick the worst app**

The app list is sorted by composite score descending. Click the top row.

**3. Inspect the radar**

The radar chart shows which dimension dominates. A high "Policy risk" with low "Operational risk" means the app runs fine but is breaking rules.

**4. Drill into the inputs**

Click any dimension to see the underlying records — violating policies, stale evidence, recent drift events.

***

## Weighting the score

Default weights treat every dimension equally. Most orgs override:

| Profile | Typical weighting |
| - | - |
| Financial services | Compliance and policy weighted heavier. |
| Internal-tools team | Operational weighted heavier. |
| Healthcare | Data risk weighted heavier. |

Adjust weights from **Settings → Risk weighting**.

***

## Use cases

> [card] Where do we invest in remediation?
>
> The top of the app list is the answer.

> [card] Is risk going up or down?
>
> The trendline on the org card shows 30-day movement.

> [card] What does the board see?
>
> Export the org roll-up to PDF for governance committee packs.

> [card] Which apps are audit-ready?
>
> Sort ascending by **Governance risk** — lowest scores are best documented.

***

## Related resources

> [card] [Policies](https://docs.flowx.ai/6.x/observatory/governance/policies.md)
>
> Policy compliance feeds the Policy risk dimension.

> [card] [AI Registry](https://docs.flowx.ai/6.x/observatory/governance/ai-registry.md)
>
> The registry's data and model tags feed Data risk and Model risk.


## Related topics

- [AI Registry](https://docs.flowx.ai/6.x/observatory/governance/ai-registry.md)
- [EU AI Act](https://docs.flowx.ai/6.x/observatory/compliance/eu-ai-act.md)
- [Assessments](https://docs.flowx.ai/6.x/observatory/governance/assessments.md)
- [NIST AI RMF](https://docs.flowx.ai/6.x/observatory/compliance/nist-ai-rmf.md)
- [Financial ROI](https://docs.flowx.ai/6.x/observatory/roi/financial-roi.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.