Sign in

Blog · Board and management reporting

Risk management dashboard: exposure, trends, and owners

Build a business risk view from balance and loss exports. Compare exposure, concentration, and changes with approved internal limits, then give each exception an owner.

The short answerA risk management dashboard compares a company's business exposures, losses, and concentration with its approved limits. Start with reconciled balance and loss exports, calculate the measures on a consistent basis, and show the movement since the previous period. Each exception needs an accountable owner, a proposed response, and a date for the next review.

A risk management dashboard shows which business exposures exceed approved limits, how they changed, and who owns the response. Build it from reconciled business exports, then place balances, realized losses, and concentration beside their appropriate thresholds. A color without a defined measure or owner gives a management team little to act on.

Start with the business decision

Choose one exposure family for the first view. The example below covers customer credit exposure at a US distributor: outstanding trade receivables by customer. Procurement dependence, operational incidents, and cash availability can sit in separate sections, each with its own definition and unit.

The distinction between broad acceptance and a measurable limit matters. NIST defines risk appetite as the broad types and amount of risk an organization accepts in pursuing its objectives. Its risk tolerance definitions describe acceptable risk or variation more specifically. For this example, management has approved customer dollar limits and a separate maximum customer share of receivables.

Those example limits are internal decisions, not industry benchmarks. Keep the approval date and scope next to the threshold. The broader management reporting package can carry the discussion, while this view supplies the exception and its supporting rows.

Prepare the exports before calculating

Bring a customer balance export for each closing date, a loss ledger for each comparison month, and a customer limit file. Keep customer identifiers consistent across the files. Include the reporting date, currency, account scope, owner, and limit effective date.

Use one closing balance per customer after consolidating its invoice rows. Remove duplicate extracts before summing, and reconcile the resulting total with the trade receivables control account. The loss ledger should contain recognized losses under a consistent accounting policy, rather than collection notes or unapproved estimates.

This illustrative extract compares August 31 and September 30, 2026. All money columns are USD. Loss columns cover the respective full months; exposure columns are closing balances.

Customer August exposure (USD) September exposure (USD) Customer limit (USD) September loss (USD) August loss (USD) Owner
Atlas 510,000 600,000 400,000 9,000 6,000 Credit lead
Beacon 380,000 400,000 450,000 3,000 2,000 Regional controller
Cedar 260,000 250,000 300,000 2,000 1,000 Credit lead
Delta 150,000 150,000 200,000 1,000 1,000 Regional controller
Total 1,300,000 1,400,000 15,000 10,000

Do not total the customer limits and treat the result as a company limit. Permission to extend credit to Beacon cannot automatically offset Atlas exceeding its own limit.

Calculate exposure, headroom, and concentration

Put the table in columns A:G, with customer rows starting at row 2 and the total at row 6. Calculate September exposure from the original invoice file, rather than typing an unsupported total. If an Invoices sheet has customer in A, open balance in B, and snapshot date in C, this spreadsheet formula returns the customer balance:

=SUMIFS(Invoices!$B:$B,Invoices!$A:$A,A2,Invoices!$C:$C,DATE(2026,9,30))

The source must be restricted to USD trade receivables. Sum the balance columns with =SUM(C2:C5) for the September control total. Then calculate:

Limit utilization = Closing exposure / Approved customer limit

Headroom = Approved customer limit - Closing exposure

Customer concentration = Customer closing exposure / Total closing exposure

In H2 through K2, use these formulas and fill down:

=IF(D2=0,"Review limit",C2/D2)
=D2-C2
=C2/$C$6
=C2-B2

The columns represent utilization, headroom, concentration, and dollar movement. Format utilization and concentration as percentages. Preserve unrounded values for calculations; the table displays percentages to one decimal place.

Customer Limit utilization Headroom (USD) September concentration Exposure movement (USD)
Atlas 150.0% -200,000 42.9% 90,000
Beacon 88.9% 50,000 28.6% 20,000
Cedar 83.3% 50,000 17.9% -10,000
Delta 75.0% 50,000 10.7% 0

Atlas has $600,000 against a $400,000 limit, so its exposure exceeds the limit by $200,000. Its share is 600,000 / 1,400,000 = 42.9%, above the illustrative internal concentration limit of 40.0%. Keep customer limit and concentration exceptions separate: they answer different questions.

Show the movement and prove the totals

The company exposure bridge is 1,300,000 + 90,000 + 20,000 - 10,000 + 0 = $1,400,000. Its increase is 100,000 / 1,300,000 = 7.7%, rounded to one decimal place. That bridge must agree with the difference between the closing balance exports.

Atlas previously represented 510,000 / 1,300,000 = 39.2% of exposure. Its concentration increased by 3.6 percentage points using the unrounded shares. The total balance increased, but Atlas grew faster, which is why its concentration crossed the internal threshold.

Recognized monthly losses rose from $10,000 to $15,000: a $5,000 increase, or 50.0%. This is a realized-loss trend, not an estimate of future loss. Reconcile each monthly loss total to the corresponding ledger accounts, and display it beside exposure rather than adding it to the receivables balance.

For dependency on a supplier or carrier, use the corresponding operating base rather than reusing customer credit definitions. Carrier concentration per lane explains that denominator. A separate operational risk dashboard can organize incident and service measures without turning them into receivable dollars.

Turn exceptions into a review agenda

Put Atlas first in the review, with the credit lead responsible for confirming the balance, the applicable limit, and any approved exception. Record the response outside the calculation: collect overdue balances, review proposed additional credit, or ask the authorized manager to reconsider the limit. The dashboard establishes the measured position; a person chooses the action.

Keep the overall display compact: current exposure, movement, loss trend, largest concentration, then the exception table. Put the file date and reconciliation status beside those measures. For obligations and renewal exposure, link to the contract management dashboard rather than expanding this customer credit view into a contract register.

Where it goes wrong

  • Mixed dates. Comparing one customer's current balance with another customer's previous close creates a concentration figure for no real reporting date.
  • Unlike amounts added together. Sales, receivables, purchasing commitments, and realized losses are different measures. Their dollar units do not make them additive.
  • Limits used outside their scope. A customer limit for one entity or currency cannot silently cover another entity or currency.
  • Rounded shares used in checks. Displayed shares can differ slightly from a complete total. Reconcile with unrounded values and round only for presentation.
  • No named owner. A correct exception still needs someone with authority to investigate and bring a response to the next review.

Review your own exposure file in Covirage

Upload your balance export, limit file, and loss records, or bring a Google Sheet with the same fields. Covirage maps the columns, and its tools compute and check the figures; the external AI model explains the results with every figure traced to its rows. Create a free Covirage account, which takes about a minute, then set up your business and bring a sample of your own data.

See board reporting for the wider management review.

Questions people ask

What should a risk management dashboard include?

Include the exposure amount, its measurement date, the relevant internal limit, the movement since the previous comparable period, and an owner. Add realized losses and concentration where they help explain the exposure. Keep different units and different types of exposure separate.

Is exposure the same as expected loss?

No. Exposure is the amount subject to a defined business risk, while expected loss requires assumptions about the likelihood and severity of loss. An unpaid receivable balance is not a prediction that the customer will default or that the entire balance will be lost.

Who sets risk dashboard thresholds?

The people with authority over the relevant business activity approve the thresholds. Finance and operating owners should document the measure, scope, effective date, and review process. A dashboard compares results with those decisions; it does not establish acceptable risk by itself.

How often should business risk reporting be updated?

Use a frequency that matches how quickly the exposure changes and when decisions are made. A monthly board view can use consistent closing balances, while an operating team may review the same measure more frequently. Always display the underlying file's measurement date.