A method and system for summarizing risk ratings to facilitate an analysis of risks. Items related by a common business function, risks associated with each item, sub-categories of risks, and categories of risks are weighted. For each item, each associated risk is evaluated by comparing responses on a questionnaire to predetermined acceptable answers. A first summarized risk rating based on weights of risks, a sub-category, a category, and an item is calculated. A second summarized risk rating based on weights of risks, the sub-category, and the item is calculated. A first summary report that includes a hyperlink and the first summarized risk rating is displayed. In response to selecting the hyperlink, a second summary report that includes the second summarized risk rating is automatically displayed. Actions are performed to mitigate risks in response to determining that the first and second summarized risk ratings exceed predetermined values.