FAQ/en

General

Although I am an expert, only the menu items My tasks and Administration are displayed to me

You must be a team member or responsible of a management system to get the menu items Risk Management, Measures, Controls or Data Protection displayed. Contact the person responsible for the management system in question so that they can add you to their team. For more information, see "Administration → Management Systems". If necessary, you can also create a new management system for yourself there.

My Tasks

Why does an orange number appear next to my controls, actions, etc. under My Tasks?

• This can have several meanings:

1. These controls are to be performed by you.
2. These controls are to be checked by you. In this case, an additional indicator is also displayed.
3. These measures are overdue, that is, the measures have exceeded their planned date. This case is also indicated by an additional flag.

For controls, the columns "To be performed by me" and "To be checked by me" can be displayed as an additional option.

Risk management

Why do colleagues from the other management systems see my hazard situations?

• If you want to hide the exposure from the other management systems, you must mark it as "Private". To do this, place a check mark next to "Private" in the top right-hand corner of the risk layer. For more information on risk layers, see "Risk Management → Risk Assessment".

I can't get any further in the variance analysis than step 2

• Did you remember to create a test object?

In order to be able to answer test questions in step 3, a test object must first be created or selected. For an initial assessment using a knowledge base, a knowledge base must be selected for this via the dropdown. Test objects can then be created from this knowledge database. To do this, click on the "green plus" of those chapters that you want to answer. For more information, see "Initial_assessment_using_knowledge_base".

• Can't create a test object for the selected topic or no green plus is displayed?

The plus for creating a test object is only displayed for topics that contain test questions. If none is displayed, then this topic is only used for structuring. You can expand these topics by clicking on the arrow (in front of it) to display the subordinate topics. For more information, see "Initial_assessment_using_knowledge_base".

How do I perform a deviation analysis or maintain a test result?

• For information on reviews (deviation analysis and review result) and how to perform them, see "Risk Management → Vulnerabilities".

I have created a protection goal but cannot use it

• Did you remember to activate the protection goal for your management system?

You will only be offered the protection goals in a management system that are also activated for the management system. This activation can only be performed by the person responsible for the management system. To do this, he must activate the desired protection target under "Administration → Management Systems". Only when this has been done can you use the protection target.

I have added a second extent of loss classification to the risk policy - why is it not suggesting the new classification to me?

• Did you remember to select this classification in the management system?

A management system can have only one damage extent classification. If you have created a new classification and want to use it, it must also be selected under "Administration → Management Systems" in the "General Settings" item for the desired management system. This can only be done by the person responsible for the management system!

Why do I not always see all resources in the structure analysis when I combine different views?

• Have you selected all levels of the resource view?

If a view other than the resource view is the main view, only those resources that are on the "application level" are displayed by default. To see the other layers as well, expand the resource view and select the desired layers. Then click on "Apply". For more information on structure analysis, see "Risk Management → Structure Analysis".

Measures and controls

Why can't I assign my measures and controls to a newly created organizational unit?

• Did you remember to activate the organizational unit for your management system?

In order to use an organizational unit for a management system, it must be assigned to the active analysis period. This assignment is done by the person responsible for the management system. This person can manage the organizational units under "Administration → Management Systems" in the "Active analysis period" tab for the active analysis period.

Datenschutz

Ich bin im Datenschutz-Managementsystem, sehe aber den Menüpunkt Datenschutz nicht

• Haben Sie sichergestellt, dass Sie für Datenschutz zumindest das Recht "Professional" haben?

Experten können dies unter "Administration → Benutzerrollen-Zuordnung" verwalten.

• Haben Sie sichergestellt, dass das Managementsystem auch als Datenschutz-Managementsystem eingetragen ist?

Experten können dies unter "Administration → Managementsysteme" verwalten.

Ich bin im Datenschutz Managementsystem, sehe aber den Menüpunkt Betroffenenkategorien nicht

• Um diesen Menüpunkt zu sehen, benötigen Sie Experten-Rechte.

Experten können dies unter "Administration → Benutzerrollen-Zuordnung" verwalten.

Wie kann ich die Berechtigung von Professionals im Verarbeitungsregister auf einzelne Organisationen erweitern?

• Haben Sie für die Organisation ein Organisationsregister erstellt und den gewünschten Professional als den Verantwortlichen eingetragen?

Professionals sehen grundsätzlich nur die Verarbeitungstätigkeiten, für die sie auch verantwortlich sind. Damit ein Professional alle Verarbeitungen einer Organisation sehen kann, muss er für das Organisationsregister der Organisation verantwortlich sein. Pro Organisationsregister kann immer nur eine Person oder ein Team Verantwortlich sein. Das heißt: Wollen Sie mehrere Personen für ein Organisationsregister verantwortlich machen, müssen Sie diese zuerst einem Team zuweisen und im Anschluss das Team als Verantwortlichen des Organisationsregisters eintragen. Mehr dazu finden Sie unter "Datenschutz → Verarbeitungsregister".