GCRI · Systemic Risk Management
Source and data register
Where Systemic Risk Management gets its data: each source with its licence, lineage, resolution, quality checks and known gaps.
Source and data register on the record.
- 02STEM methods6 canonical methods applied
- 03Topics8 subject pages
- 04Counterparts5 platforms in shared fields
- 05PublisherThe Global Centre for Risk and Innovation
Each source carries five facts.
Origin
Who produces the data and how.
Access terms
Licence, restrictions and permitted uses.
Quality
Coverage, resolution, update frequency and known errors.
Provenance
How the data reached the platform and what was changed.
Gaps
What is missing and how the gap is handled.
Every source the topic dossiers cite, with its terms.
| Source | What it gives | Terms | Used in |
|---|---|---|---|
| IEC 31010 Risk assessment techniques | Descriptions of identification techniques such as checklists, HAZOP and scenario analysis | Licensed standard, purchase required | Identification and risk taxonomy, Quantitative and qualitative methods |
| Academic interdependency case libraries | Reconstructed cascades from past events, with methods described | Licence per publication | Cascades and interdependence |
| Corporate annual reports and principal risk disclosures | How firms describe their risks and dependencies | Public records, terms per publisher | Enterprise and public risk |
| COSO Enterprise Risk Management framework | Components and principles on governance, culture and appetite | Licensed publication, purchase required | Risk governance and appetite |
| EM-DAT international disaster database (CRED, UCLouvain) | Disaster events with human and economic impacts | Free for non-commercial use with registration | Quantitative and qualitative methods |
| Global Internal Audit Standards | Requirements for internal audit independence, planning and reporting, from The Institute of Internal Auditors | Public, IIA terms of use | Assurance and correction |
| Government financial statements and public accounts | Recorded provisions, guarantees and contingent liabilities | Public records, licence per government | Enterprise and public risk |
| Grid and network operator outage databases | Records of outages, duration and customers affected | Public summaries; full data by agreement (to check) | Cascades and interdependence |
| IMF Fiscal Transparency Code and fiscal risk statements | Standards for disclosing fiscal risks and contingent liabilities | Public, IMF terms of use | Enterprise and public risk |
| Incident reports from infrastructure operators and regulators | Documented failures with their causes and downstream effects | Public records, terms per publisher | Cascades and interdependence |
| IPCC Shared Socioeconomic Pathways and the scenario database | Long-term socioeconomic and emissions pathways | Open, licence per database (to check) | Scenario and stress testing |
| IRDR Peril Classification and Hazard Glossary | A hierarchical classification of perils used in loss databases | Public, IRDR terms of use (to check) | Identification and risk taxonomy |
| ISO 22301 Business continuity management systems | Requirements for continuity planning, objectives and exercises | Licensed standard, purchase required | Resilience engineering |
| ISO 22316 Organisational resilience principles and attributes | Principles and attributes of organisational resilience | Licensed standard, purchase required | Resilience engineering |
| ISO 31000 and its handbook | Principles and framework language for governance, roles and integration | Licensed standard, purchase required | Risk governance and appetite |
| National audit office reports | Independent public sector audit findings on risk and resilience | Public records, licence per office | Assurance and correction |
| National audit office reports on risk management in government | Independent findings on how public bodies govern risk | Public records, licence per office (to check) | Risk governance and appetite |
| National critical infrastructure resilience guidance | Government guidance on resilience planning for operators | Public records, licence per government | Resilience engineering |
| National risk assessment reasonable worst-case scenarios | Government-published planning scenarios for civil contingencies | Public records, licence per government | Scenario and stress testing |
| National risk registers and national risk assessments | Government-published lists of risks with their descriptions and assessment approach | Public records, licence per government (UK under Open Government Licence) | Identification and risk taxonomy |
| NGFS climate scenarios | Reference climate transition and physical risk pathways for financial and policy stress tests | Open, attribution, NGFS terms of use | Scenario and stress testing |
| OECD national supply and use tables and Inter-Country Input-Output tables | Economic dependencies between industries and countries | Open, OECD terms of use | Cascades and interdependence |
| OECD Recommendation on the Governance of Critical Risks and its implementation reports | Country practice on national risk governance and coordination | Public, OECD terms of use | Risk governance and appetite |
| OECD reports on the governance of critical risks | Practice on public-private cooperation in risk management | Public, OECD terms of use | Enterprise and public risk |
| Public contract registers and procurement portals | Which services are contracted out and to whom | Open data where published, licence per portal | Enterprise and public risk |
| Published annual reports and principal risk disclosures | How organisations describe their risks, appetite and governance | Public records, terms per publisher | Risk governance and appetite |
| Published operational loss data consortia summaries | Aggregate operational loss patterns in financial services | Members only; public summaries (to check) | Quantitative and qualitative methods |
| Published supervisory stress test methodologies and results | Scenario design and aggregate outcomes from central banks and supervisors | Public records, terms per authority | Scenario and stress testing |
| Resilience Engineering Association publications | Research on adaptive capacity, the resilience potentials and safety | Licence per publication | Resilience engineering |
| Retraction Watch database | Records of retracted and corrected research used in evidence bases | Open, Crossref terms (to check) | Assurance and correction |
| Safety investigation board reports | Investigations that trace organisational and systemic factors | Public records, terms per board | Assurance and correction |
| Safety investigation reports from transport and industrial safety boards | Detailed accounts of failures, near misses and contributing factors | Public records, terms per board | Resilience engineering |
| Sendai Framework Monitor and national disaster loss databases | Published reporting of disaster losses against Sendai targets | Public, UN terms of use | Quantitative and qualitative methods |
| The IIA Three Lines Model | Roles of management, risk functions and internal audit in assurance | Public, IIA terms of use | Assurance and correction |
| TU Delft expert judgement database | Past structured expert judgement studies with calibration data | Licence to check | Quantitative and qualitative methods |
| UNDRR Global Assessment Report | Analysis of systemic and cascading risk across sectors and scales | Public, UN terms of use | Cascades and interdependence |
| UNDRR guidance on scenario-based exercises | Design guidance for exercises that test preparedness | Public, UN terms of use | Scenario and stress testing |
| UNDRR terminology on disaster risk reduction | Agreed definitions of hazard, exposure, vulnerability, capacity and related terms | Public, UN terms of use | Identification and risk taxonomy |
| UNDRR-ISC Hazard Information Profiles | Standard definitions and descriptions of hazards across natural, technological, biological and societal clusters | Public, UNDRR and ISC terms of use | Identification and risk taxonomy |
Where the risk management data record is thin.
- Comparable loss data across organisations and sectors.
- Data on near misses, which reveal weak barriers before losses do.
- Dependency data held by suppliers and service providers.
- Public registers’ methods, which are often not published.
How the register grows.
Sources are added to the register as they are reviewed. A source is listed only once its terms permit the use described.
Where this page’s references lead.
The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.
Questions and answers.
Can I suggest a data source?
Contribute evidence from this page.
Reports is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
- EmailGateway GW-GCRISend it from this pageEvidence, a correction, a case, a method, a review, a translation or profile input. It arrives tagged with this page, so the editor who owns it receives it.
- ZenodoOpen depositDeposit it and submit to the communityPublish your own record on Zenodo with your ORCID iD, then submit it to the Reports community there. Curators review it; the DOI stays yours.
- ReportsGCRISee every way to contributeThe contribution types, how each is reviewed, what credit you receive, the licence and what is never accepted.
Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.
Bring a method, a dataset or a question.
Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Legal documents.
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.