Risk identification, assessment and controls ontology: dynamic risk assessment, risk-and-control frameworks. Kept deliberately generic; the specific disciplines live as detail in project prose rather than as separate skill nodes.
Where I've used it16
Standing continuous controls monitoring across finance processes, decision-useful by design
Led a data quality and governance review across a global enterprise, the largest of its type undertaken there.
Led digital capability for a global internal audit function spanning 100+ countries and 50+ audits a year, defining the digital strategy and embedding analytics into audit delivery.
Discrete reviews grown into an embedded analytics partnership; compliance exposures identified and remediated across multiple award and EBA scenarios
Handed over a maintainable assurance-mapping solution linking assurance activity to risks and processes
Delivered a validated analytics view of leading safety indicators under controlled data handling
Practical improvement roadmap for inventory governance, master data and warehouse processes
Assessed whether access across HR and payroll systems remained appropriate
Cut vendor security assessment effort from 15 hours to at most 7.5
A consistent, repeatable Risk Analytics delivery methodology aligned to the internal audit lifecycle
Embedded data discovery into the internal audit planning process
Integrated repeatable analytics into recurring location and project audits
Reusable assurance-mapping data model and tailored visual solutions across multiple organisations
Recommendations on response times, SLA adherence and incident governance