Adding a Risk Control

Defining a precaution for monitoring a risk — with control frequency, control type, responsible person and assessment cycle.

A control defines how a risk is monitored so that someone notices a change.

Prerequisites

You must be the Process Owner of the process.

A risk has been added to a process or a process element.

The risk is not published.

To save a control, you must at least define the title and the assessment cycle (default: Annually).

Context

A control does not contain any specific actions, for example to reduce the risk. It only ensures that someone notices a change in the risk.

Controls for risks should be defined and assessed regularly in particular when processes or process elements with a high risk or a high level of opportunity require regular attention.

The Control Frequency specifies how often the control is carried out, for example Daily or Event-Based; Bpanda does not evaluate it. The Assessment Cycle specifies how often someone assesses the control in order to verify its effectiveness. Based on it and the last assessment, Bpanda determines whether a control assessment is Valid, Upcoming or Overdue.

Define how the control is to be carried out (implementation provisions) and refer to it under Location of Proof. This makes it easier to substantiate a control assessment.

Several different controls can be set up for each risk.

How to Proceed

Select the process or process element whose risk is to be controlled.

The risks recorded for it so far are listed.
Click the risk that is to be controlled.

The details are expanded.
To add a control for the risk, click Add Control.

The dialog of the same name appears.
Enter the Title and a Description of the control.
Select the Control Frequency, the Control Type and the Control Mechanism.
Click Responsible Person and select the person who is responsible for the control.
Select the Assessment Cycle for the control.
As the Location of Proof, enter a reference or link to the implementation provisions and the evidence for the controls.
Click Record Control.

The control is displayed in the Controls list.

The risk is marked with the control icon.