Assessing Risks and Opportunities

As a Process Owner, you can record risks and opportunities for processes and process elements and assess them in a matrix of probability of occurrence and extent of damage.

Being responsible for a process includes addressing its opportunities and risks. The risk analysis functions support you in doing so — from the initial assessment to regular control.

Recording and Assessing Risks and Opportunities

As a Process Owner, you record the opportunities and risks of your processes, separately for the overall process and for individual elements. You assess each risk by probability of occurrence and extent of damage, and each opportunity by probability of occurrence and extent of success. Bpanda automatically derives the priority from this.

You start the assessment on the process page with ⋮ Analyse Risks.

Note: A risk analysis can only be created for published process versions, not for processes that are under review.

Risks for the overall process and individual process elements can arise, for example, from standards or legal requirements that have not yet been implemented. Opportunities for the overall process and individual process elements can be based, for example, on the use of new technologies.

Templates that the Risk Manager can provide can be used for simple and consistent recording.

The recorded opportunities and risks are displayed on the process or the relevant process elements with consistent symbols. This makes it easier to assess the process as a whole (e.g. very risky or full of opportunities).

The Risk Manager gains an overview of the key opportunities and risks in the process landscape from the assessed processes and process elements. The recorded risks and opportunities only become visible to the authorized Process Users once the analysis is published, see Publishing a Risk Analysis.

Carrying Out Control Assessments

A control defines how a risk is monitored so that someone notices a change. A control assessment checks at regular intervals whether this monitoring works.

You should carry out control assessments in particular for processes or process elements with a high priority so that you can influence the development of the risk in a targeted manner. You define the control itself with Adding a Risk Control.

What You Can Do Here

Adding a Risk or Opportunity — from the process page to the saved entry.
Editing a Risk or Opportunity — change the details afterwards.
Saving a Risk or Opportunity as a Template — save a typical entry for other processes.
Changing the Assignment of a Risk or Opportunity — assign the entry to another element of the same process.
Deleting a Risk or Opportunity — remove an entry or mark it as obsolete.
Adding a Risk Control — define the control frequency, control type, person responsible and assessment cycle.
Assessing a Risk Control — check the effectiveness in the defined cycle.