Evaluating a risk control

Check the effectiveness of a control within the defined evaluation cycle and record the overall evaluation.

A control evaluation checks at regular intervals whether a control is working, that is, whether the monitoring of the risk is functioning.

Prerequisites

You must be responsible for the process.

A control has been added to a risk and this risk is published.

Context

A control is evaluated in the Overview tab of a process in the respective risk analysis.

For how a control is created, see Adding a risk control.

How to proceed

1. In the detail view of the risk, in the Controls section, click the control you want to evaluate.

   The details of the control are expanded.

2. Click Evaluate now for the first evaluation or Evaluate again.

   The Evaluate risk control dialog appears.

3. To evaluate the control, select the applicable entries for the evaluation criteria Execution, Control design, Effectiveness and Appropriateness.

   The Overall evaluation is determined automatically from these entries.

4. To define a different overall evaluation, select it.

5. If necessary, enter the specific Weaknesses of the control activity.

6. Click Record evaluation.

   The evaluation is displayed in the Evaluations list.

   The overall evaluation is displayed with a color highlight.

   You can edit the control evaluation using the edit icon.