An interactive risk management system and method for a business or other organization generates a graphic display to the user, through the browser, to display a mapping of processes used in conducting the business or the affairs of the organization and allow the user to selectively view additional data, such as messages describing risks associated with the process selected. The user may navigate thorough and among the processes to access and review associated data, allowing the user to gain information about selected processes and associated risks.