Skip to content
Sentinel Unity

Organization

The legal structure and the operating structure, both on record

Regulators care about the legal entity. Work happens in departments and functions. Sentinel Unity models both, so every framework, budget, appetite and role can be scoped to the right one.

  • Legal entities with jurisdiction, industry, risk tier and status
  • Locations attached to entities; departments and functions inside them
  • Frameworks activated per entity, so a group and its subsidiaries can differ
  • Group roll-ups computed as the sum of entity views
Download the GRC Platform brochure (PDF)

In the application · Govern

  • Entities
  • Locations
  • Departments
  • Functions
  • People
  • Responsibility (RACI)
  • Northbridge Financial GroupGroup12 entities5 regions
  • Northbridge BankEntityTier 13 frameworks
  • TechnologyDepartmentOperations
  • Head officeLocationPrimary
  • Northbridge Asset ManagementEntityTier 22 frameworks
  • ComplianceDepartmentControl

Frameworks, appetite, budgets and roles are scoped per entity; the group view is their sum

Hierarchy

One tree that every module scopes to

Every record in the platform belongs to an entity. Objectives, risks, assessments, budgets and vendors inherit that scope, which is what makes a twelve-entity group readable at group level and honest at entity level.

  • Entity types, department types, function categories and location types as configuration
  • Risk tier per entity feeds appetite defaults and review cadence
  • Bulk import of entities, locations, departments and functions from a workbook
  • Timezone and contact details per entity for scheduling and notification
  • Northbridge Financial GroupGroup12 entities5 regions
  • Northbridge BankEntityTier 13 frameworks
  • TechnologyDepartmentOperations
  • Head officeLocationPrimary
  • Northbridge Asset ManagementEntityTier 22 frameworks
  • ComplianceDepartmentControl

Frameworks, appetite, budgets and roles are scoped per entity; the group view is their sum

People and responsibility

Records are owned by named people

Ownership is a person, not a login. Responsibility assignments record who is responsible, accountable, consulted and informed for a record, and object-level scoping limits what a role can see to the entities it works in.

  • People directory linked to users, departments and reporting lines
  • RACI assignments on objectives, risks, controls, policies and findings
  • Object-level scope administration per role and entity
  • Ownership survives staff changes: reassignment is a recorded transition
Asset module permission bundles by lifecycle action
Actionasset-viewerasset-coordinatorasset-approverasset-admin
ViewAllowedAllowedAllowedAllowed
Create and editNot allowedAllowedNot allowedAllowed
Submit for intakeNot allowedAllowedNot allowedAllowed
Send to reviewNot allowedAllowedNot allowedAllowed
Send backNot allowedAllowedAllowedAllowed
ApproveNot allowedNot allowedAllowedAllowed
ActivateNot allowedNot allowedAllowedAllowed
Module settingsNot allowedNot allowedNot allowedAllowed

Every module ships bundles at this granularity. Segregation-of-duties conflicts are declared as rules, with logged exceptions.

Framework alignment

Works with your control frameworks

This module shares the platform control library. International standards, sector regulations and your own internal standard are loaded the same way and mapped to one another, wherever you operate.

See organisation structure in your environment

A walkthrough scoped to your entities, your frameworks, and the way your programme is actually run.