Risk Management - Part 3 - Assessment Configurations

Creating Risk Assessment Configurations

Before creating any risk assessments, configuration schemes must be designed to provide a framework for the assessments. This includes defining the fields and information which should be displayed in the assessment’s ‘Overview’ sheet, designing the risk matrix which will be used to score all risks, and defining the fields and information to be included in each risk item. This area also allows configuring the default settings for risk summary tables.

To create a new risk assessment Configuration:

1. Click Settings in the top right corner of the ‘Risk’ tab; this link is only shown to users with the permission Risks: Manage Settings
2. The Settings page which opens shows two cards, Configuration and Templates; click Configuration
   
   
   
3. Click the Create New Configuration button in the bottom right corner of the page
   
   
   
4. In the configuration ‘Settings’ tab, enter a Name in the designated field; it must be at least 2 characters long
5. In the Applies to OUs field, select the Organisational Unit(s) the configuration applies to; only OUs where you hold the permission Risks: Manage Settings are listed
6. The Index Config field has a default recipe to produce an index for assessments created with this configuration, which can be modified according to the information below; the field is required and must be between 2 and 250 characters long. If left unchanged, it will produce an index with the words, “Risk Assessment”, followed by a sequential number (represented by the variable, ’%id’ )
7. Click the Create button at the bottom of the page; this button remains greyed-out until the information entered meets requirements

When the configuration record is initially created it starts in ‘Draft’ state, and buttons become available to Publish it, Delete Draft or check its Version History.

Before publishing the configuration, work must be completed in the other configuration tabs.

The configuration also has a Changelog tab.

You can click the following links to jump to articles relating to each of these tabs:

• Risk Matrix
  
• Overview Tab
  
• Risks
  
• Risks Table
  
• Publishing Configurations
• The last article in this section is on Updating Risk Assessment Configuration

Index Config Parameters

A recipe can be set in a Risk Configuration for automatically generated indices of new risk assessments created from it. The recipe can include any short text and it can have any of the following variables within it:

• %id - adds a sequential number to ensure the index is unique; if the recipe does not include %id and the generated index already exists, a space and a sequential number are added to the end to keep it unique
• %year - adds the year in which the risk assessment is created
• %month - adds the ‘month’ portion of the date when the assessment is created
• %day - adds the ‘day’ portion of the date

Next step:

The next article covers Risk Matrix Configuration

Previous step:

The previous article covers Risk Assessment Permissions and Settings