A business controls diagram displays potential risks for a process or function as well as risk control methods.

A risk represents the possible danger of a defined process objective not being achieved.

Risk control is a general way of eliminating or minimizing risks.

Risk solution means implementing risk control for a risk.

The business controls diagram layout corresponds to a matrix or table. The abscissa shows the potential process risks, and the ordinate shows the possible risk control methods. Risk solutions are now inserted as operators between risk and risk control. Additionally, organizational units (in the sense of user requirements) and documents, which also support implementation of risk control for a risk, may be added to the model.

This model type is generally used to describe SAP® standard processes. The model shows the risks and risk control methods of an SAP® solution for the process being examined.