Risikomanagement Einstellungen/en

In "Risk management → Settings", experts can configure the risk management and add further configurations in addition to the risk policy, to adapt the risk management to the requirements of the management system.

Risk/opportunity/impact:

Categories of risks/opportunities used: Define here which categories of risks and opportunities are to be used in this management system. Classification of damage extent and benefit: Define here the classification used in this management system for the assessment of potential damage and benefits. If you do not make a selection, the standard classification is used. One use case for a separate classification of damage extent and benefit would be, for example, to assess potential damage and benefits in the data protection management system from the perspective of the data subject. As a result, only risks/opportunities and protection need analysis weightings belonging to the associated classification are displayed by default in the risk management dashboard, in risks and opportunities, and in the structure analysis.
Attention: Changing the classification may affect the informative value of already assessed risks or opportunities as well as protection need analyses already carried out in the management system. Show Gaps tab: In the risk, this tab lists the gaps, i.e. the review questions answered negatively in the gap analysis. Show Threats tab: This tab lists threats that are linked to the risk. (You can link the threats directly, or a linked gap brings its threats along into the risk.) Show monetary impact in risks & opportunities: If you activate this item, you have an additional property in the master data page of risks & opportunities with which you can present the possible damage or benefit as a monetary value.
Attention: Changes to this property must then be justified in the change log of the risk.

Extensions

Define here whether ESG management is to be included in risk management and whether you would like to enable reviews to be sent to suppliers as self assessments.

The permissions of the Experts and Professionals for both are assigned under Administration → User roles.

Menus

• Show structural analysis
• Show protection needs
• Show vulnerabilities
• Show threats

Define here which menu items are to be included in the risk management and hide those you do not need in your management system. Depending on which menu items you have in use, the corresponding report pages are also shown or hidden, respectively.

ESG thresholds

The thresholds for the KPI "Double materiality" can be set here. For financial and impact materiality, you can set from what value on a field of action is seen as material and therefore to be reported. This is shown graphically in the KPI.

Protection needs

A naming template for protection needs analyses can be configured and its use be activated. If activated, new protection needs analyses are automatically named after the configured schema, but can be renamed at any time (unless they are closed).

Furthermore you can configure resources of which model segment can be used in the protection needs analysis.