Risk Management Dashboard
Weitere Optionen
The risk management dashboard provides Experts, Professionals, and Observers information about risks, compliance coverage, and more of the management system. For this purpose, key performance indicators (KPIs) are available to the dashboard. These can be used to customize the dashboard as desired.
Caution: Only risks that have been evaluated for the damage extent classification of the selected management system are displayed.
Risk management KPIs
The following KPIs are available for the risk management. How to customize and create dashboards is described under create and edit dashboards.
Gap analyses by state
This KPI provides information about the status of the gap analyses in the selected analysis periods. It is possible to restrict whether all analyses, only review results or only gap analyses are to be displayed.
The data is selected either in the editing mode, in the dialog window, or by activating data selection in the view mode.
Double-clicking on a circle segment opens a selection dialog in which the respective analyses are listed. The analyses can also be opened by double-clicking.
Spider charts
If a sub-chapter of a spider diagram is to be analyzed, this can be done by clicking on the point of the respective parent chapter in the spider. This selects the chapter and displays all sub-chapters with their respective coverage: the spider "zooms" a layer deeper. To undo the selection, the back arrow can be clicked: "the spider "zooms" back out.
With a right click, a selection dialog can be opened in Compliance fulfillment and Questions coverage (total), which shows the review questions/results. It also shows chapters, reviews, and the answers. Double-clicking a review question/result opens the review at the corresponding location.
Ho much text is displayed around a spider chart depends on the number of displayed chapters, the available space, and whether the KPI is being edited. Using a checkbox, an overview of the currently displayed chapters can be added to the KPI.
Compliance fulfillment
This KPI provides information on the extent to which the compliance requirements for a standard/norm are met. The green line represents the target score of the current analysis period. This can be used to find out which topics/chapters of a standard or norm should be dealt with in more detail.
The answered questions of a standard chapter are used as the basis for calculation. Neither structural questions nor questions marked as dispensable are taken into account for the calculation. The average score of the answered questions of a standards chapter is displayed.
The data is selected either in the editing mode, in the dialog window, or by activating data selection in the view mode.
Questions coverage (percentage)
The questions coverage (percentage) shows the ratio of the total number of test questions of a selected knowledge base linked to a standards chapter. Meaning, how many questions out of the total available have been answered. Each chapter can reach a maximum of 100%, even if a question is answered more than once. Structure questions are also excluded from the calculation. Thus, the test question coverage of a standard/norm per knowledge base is evaluated here.
The data is selected either in the editing mode, in the dialog window, or by activating data selection in the view mode.
Questions coverage (total)
The question coverage (total) is intended to show how many questions AND test results for the standard chapter were answered or marked as dispensable. I.e. the coverage of the test questions from all test questions of all knowledge databases, which map to this standard, is shown in total. Structural questions are excluded from this calculation. If a standard chapter is created several times as a test object and the same test questions are answered several times, the number of answered questions increases accordingly.
This provides information as to whether certain topics have been highlighted to a greater or lesser extent in the audits and whether it may make sense to focus on certain topics in future audits.
The data is selected either in the editing mode, in the dialog window, or by activating data selection in the view mode.
Risk matrix
This KPI provides an overview of how dangerous the individual risks of the management system can be. The further to the top right a risk is located, the more dangerous it is. If the mouse pointer is moved over one of the points in the diagram, it becomes apparent which risk is concerned. By default, no accepted or rejected risks are displayed.
- Risks: This option shows risks.
- Chancen: Durch diese Option werden die Chancen angezeigt.
- With accepted risks: Through this option, risks that have already been accepted and are therefore in the "Accepted" status can also be displayed.
- Show risks for this management system only: This option ensures that only the risks from the current management system are displayed. Public risks (as in, not marked as "private") from other management systems are no longer displayed as a result.
- Risk categories: Here, the risk matrix can be restricted so that only risks that are associated with the selected risk categories are displayed. A risk category can be associated with the risk directly in its detail page.
- OrgUnit: Here, the risk matrix can be restricted so that only risks that are associated with the selected organizational units are displayed. An organizational unit can be associated with the risk via the "structural elements" of the risk.
The time span under the risk matrix can be used to track how risks have developed over a period of time. All you have to do is click on one of the points in the time span. The time span can be adjusted using the arrows on the left and right.
Risks/opportunities by state
This KPI shows an overview of the risks and opportunities by their state and the completeness of the risk/opportunity assessment.
The outer layer displays all risks and opportunities by their state. The inner layer displays not or not completely evaluated risks and opportunities (missing the probability of occurrence of extent of damage) in relation to the total of existing risks/opportunities. The total amount of risks and opportunities that exist as per the set filter is displayed in the middle of the diagram.
It's possible to limit the displayed risks/opportunities to those of the current management system.
The data is selected either in the editing mode, in the dialog window, or by activating data selection in the view mode.
Double-clicking a circle segment opens a dialog in which the respective risks are listed. The risks can also be opened by double-clicking.
Risks/opportunities by category
This KPI gives information about the categories that risks and opportunities are assigned to.
It is possible to restrict the considered risks/opportunities to only active risks/opportunities and/or only those of the current management system.
As risks and opportunities can be assigned to multiple categories, they can also appear multiple times in this KPI (or not at all, if they haven't been categorized). The number of risks/opportunities therefore does not have to correspond to the number of risks/opportunities in the risk matrix. A double-click on a bar segment opens a dialog with a list of the respective risks and opportunities. The risks/opportunities can also be opened with a double-click.
Risks by threats
This KPI gives information about the threats that are assigned to risks.
It is possible to restrict the considered risks and opportunities to only active risks or opportunities and/or only those of the current management system. Furthermore, it is also possible to show all available threats, thus creating a complete list including also those threats that are not assigned to any risk or opportunity.
As risks can be assigned to multiple threats, they can also appear multiple times in this KPI (or not at all, if they haven't been assigned). The number of risks therefore does not have to correspond to the number of risks in the risk matrix. A double-click on a bar segment opens a dialog with a list of the respective risks. The risks can also be opened with a double-click.
The data is selected either in the editing mode, in the dialog window, or by activating data selection in the view mode.
Active risks/opportunities and their treatment
This KPI shows a risk treatment overview regarding open and finished measures as well as controls linked to active risks and opportunities.
The KPI is divided into an outer and an inner ring. Here, the outer ring shows how many risks have a treatment, complications in their treatment, or no treatment at all. The risks with treatment are further apportioned in the inner circle, and divided into those with completed treatments or treatments in processing.
It's possible to limit the displayed risks and opportunities to those of the current management system.
The data is selected either in the editing mode, in the dialog window, or by activating data selection in the view mode.
Double-clicking a circle segment opens a dialog in which the respective risks are listed. The risks can also be opened by double-clicking.
Protection needs analyses by state
This KPI provides information on the status of the protection needs analyses in the selected analysis periods. It is possible to restrict whether all analyses, only analyses of organizational units or only analyses of processes are to be displayed.
- Include historical analyses: By default, the most recent versions of multiple protection needs analyses for organizational units and processes are displayed. However, this checkbox can also be used to display older protection needs analyses for the organizational units and processes.
The data is selected either in the editing mode, in the dialog window, or by activating data selection in the view mode.
Double-clicking on a circle segment opens a selection dialog in which the respective protection needs analyses are listed. The protection needs analyses can also be opened by double-clicking.
Top gaps
This KPI provides the audits with the highest sum of deviations according to the Target score weighting of the selected protection target and audits.
The sum of deviations by target score weighting in the reviews assigned to the audits always refers to the current target score. This means that even if the deviations are limited to a specific analysis period, they are examined with the target score of the current analysis period.
It is also possible to configure which reviews are displayed:
- Underfulfillments: Only reviews that have a sum greater than 0. The larger the sum, the worse.
- Overfulfillments: Only reviews that have a negative sum. The smaller the sum, the better.
- All: All reviews, regardless of whether the sum of the deviations is positive or negative.
The sorting influences whether you are presented with the worst results (highest positive sum of deviations) or the best deviations (lowest positive sum of deviations, but no overfulfillments).
- Closed assessments only: By this option only completed reviews are taken into account.
- Include historical gaps: By default, the most recent versions of repeatedly run reviews are included. However, by using this checkbox, older versions of reviews can also be taken into account.
If no analysis period is selected, all deviations from all analysis periods are displayed. It is also possible to restrict from which organizational units the checks must originate from.
The data is selected either in the editing mode, in the dialog window, or by activating data selection in the view mode.
Double-clicking on a gap opens the corresponding analysis with the gap.
Top risks/opportunities
This KPI is a listing of the top risks and opportunities of the management system. The displayed risks and opportunities are thus ranked according to their risk score. The higher up, the greater the risk. The further down, the greater the opportunity.
Alternatively, it is also possible to switch to entities. This will display those entities that are most at risk.
The triangles provide information about how dangerous a risk is and how at risk an entity is. The dice provide information about how good an opportunity is. If you move the mouse pointer over them, the respective risk score is displayed.
Double-clicking on a risk/entity will take you to the corresponding risk/opportunity/entity.
Top review objects
This KPI provides the review objects with the highest sum of gaps according to the Target score weighting of the selected protection target and audits.
The sum of deviations according to target score weighting of the review objects assigned to the audits always refers to the current target score. This means that even if the deviations are limited to a specific analysis period, they are examined with the target score of the current analysis period.
It is also possible to configure which review objects are displayed:
- Underfulfillments: Only review objects that have a sum greater than 0. The larger the sum, the worse.
- Overfulfillments: Only review objects that have a negative sum. The smaller the sum, the better.
- All: All review objects, regardless of whether the sum of the gaps is positive or negative.
The sorting influences whether you are presented with the worst results (highest positive sum of deviations) or the best deviations (lowest positive sum of deviations, but no overfulfillments).
- Closed assessments only: With this option, only review objects from completed reviews are taken into account.
- Include historical review objects: By default, the most recent versions of multiple-valued review objects are included. However, this checkbox can also be used to include older versions of the review objects.
If no analysis period is selected, all review objects from all analysis periods are displayed. It is also possible to restrict the organizational units from which the reviews of the review objects are taken.
The data is selected either in the editing mode, in the dialog window, or by activating data selection in the view mode.
Double-click on a applied topic to open the corresponding analysis with the applied topic.
