Manage definitions for risks and controls

With the centralized risks and controls management, you can configure custom risks and controls data types and manage risk and control objects in the dictionary.

This way, you can ensure your risks and controls are consistent throughout your process landscape and facilitate re-use of those already defined.

Create dictionary categories for risks and controls

For risks and controls, it is not possible to use subcategories. If you need more than one category for risks and controls, we recommend using multiple risk attributes. This means you create one dictionary category for each type of risk, for example financial risks, legal risks, or health risks.

To create dictionary categories, follow these steps:

  1. In the explorer, click Setup > Define notations/attributes.
  2. Switch to the Dictionary tab and create two new categories:
    • One category for risks
    Create a risk category.
    • One category for controls
    Create a control category.
  3. Set the type of the category to Risks or Controls.

  4. To customize your risks and controls definition, add additional attributes to these categories. The attributes resemble the table headers in your risks or controls tables, for example severity, control interval, or responsibility.

    Collaboration Hub only supports the following custom attribute types in risk management tables:

    • Single line text
    • Drop-down box
    • Number

    Custom attributes of other types won't be displayed in risk management tables in Collaboration Hub.

Configure 'Risk Management' element attributes

Follow these steps:

  1. Switch to the Modeling Language tab and create a custom Risk Management attribute.

  2. When configuring the attribute, reference the newly created Risk and Control categories.

    Only the elements of the configured categories can be used in the risk and control tables. Elements from subcategories are not available.

    Create a 'Risk Management' attribute.
  3. Define risk and controls for diagrams in your process landscape.