Risk management settings

In "Risk management → Settings", experts can configure the risk management and add further configurations in addition to the risk policy, to adapt the risk management to the requirements of the management system.

Risk/opportunity/impact:

• Used categories of risks and opportunities:

Define which categories of risks and opportunities are to be used in this management system.

• Extent of damage classification:

Here, define the classification used in this management system to assess potential damage. If you do not make a selection, the default extent of damage classification will be used.

A use case for your own extent of damage classification would be, for example, to assess potential damage in the data protection management system from the perspective of the affected party. As a result, the Risk Management dashboard, hazard situations, and structural analysis will by default only display hazard situations and SBA weightings for the associated extent of damage classification.

Caution: Changing the extent of damage classification potentially affects the meaningfulness of previously evaluated risks as well as protection needs analyses made in the management system.

• Show gaps tab

Define whether the list of assigned gaps should be included in the view of risks and opportunities.

• Show threats tab

Define whether the list of assigned threats should be included in the view of risks and opportunities.

• Show monetary impact in risks & opportunities

Define whether you want to record the monetary impact of risks and opportunities in their creation forms.

Modules

Define here whether the ESG management is to be included in the risk management, and whether you want to allow reviews to be sent to suppliers as self assessments.

The authorizations of the experts and professionals for both are distributed under Administration → User roles.

Menus

• Show structural analysis
• Show protection needs
• Show vulnerabilities
• Show threats

Define here which menu items are to be included in the risk management and hide those you do not need in your management system. Depending on which menu items you have in use, the corresponding report pages are also shown or hidden, respectively.

ESG thresholds

The thresholds for the KPI "Double materiality" can be set here. For financial and impact materiality, you can set from what value on a field of action is seen as material and therefore to be reported. This is shown graphically in the KPI.