## A control leaves a green risk

The lead played the blast radius again and named two details and a scenario ([D23](briefs.html)).

- **Red travels up the path.** While anything below a role is unaccepted, that role's path, halo
  and count are red, whatever else it holds. Connect the CRM alone and the red runs from the CIO
  through the CTO and the CEO to the board.
- **A control does not make a risk zero; it leaves a green one.** Every control now has a residual
  risk of its own, inside its holder's authority and accepted the day the control lands: an
  approval step is a person clicking (the CISO's); a message approved in a hurry still goes out
  (the rep's); a CRM limited to the rep's own accounts still takes wrong entries at machine speed
  (Sales'). That is what a control does to a risk, and the article says so in section 04.
- **Enough controls to make every path green.** Four more: the shared-inbox delegation removed;
  an execution proxy that carries out every write under the ABP's rules, which bounds every write
  row at once and is drawn between the assistant and its connections; processing terms with the
  provider and a notice to customers; the insurer's written answer. The last two end a risk by
  changing a fact it was established on. A button, *connect everything, with every control*, does
  it in one click: nine green risks remain, unbounded excess is nought, and every path is green.
- **Risks for the CFO and Legal.** RL, customer mail goes to the model provider and the notice
  does not say so, is Legal's; RC, nothing in the cover says whether an act of the agent as staff
  is covered, is the CFO's. Both are in the tables, the six weeks and the strip: nine risks on day
  0, nine open and none unaccepted on day 42.
- The counts under the figure show unaccepted (red) and accepted (green) side by side, so the
  risks can be seen going down as the controls go on.

What was not done:
- The effectiveness of a control. Every control is taken as working, as the lead said to for now.
  A control that is on and not working is what the ABP's evidence tiers record; it is not modelled.
- Residual risks in the holder's own words. The figure draws them from a fixed list; in a real
  record each holder would write theirs when the control lands.