Using Control Assessments

Control assessments show whether the controls work, and thus whether you can rely on the risk analyses.

The Control Assessment tab of the Risk Management page brings together the status of the regular controls in the Process Space: the Overall Assessment, the controls without assessment and the four assessment criteria Execution, Control Design, Effectiveness and Appropriateness.

Prerequisites

You are a Risk Manager or BPM Manager.

What is the Control Assessment tab for?

Control assessments show whether the controls work, and thus whether you can rely on the risk analyses.

Structure of the Control Assessment tab

The tab displays cards for the Overall Assessment, for Controls Without Assessment as well as for the assessment criteria Execution, Control Design, Effectiveness and Appropriateness of the controls.

You can click cards whose icon is highlighted or that carry a link. They then display the details with the respective processes.

The Back button takes you back to the tab.

• Overall Assessment

  Uses a pie chart to show which control assessments have been classified as open, good, acceptable or weak.

  Clicking the detail icon opens an overview of all assessed controls.

  Clicking the respective slice in the pie chart opens only those control assessments that correspond to the respective status.

• Controls Without Assessment

  Displays all published controls for which no assessment has been recorded yet.

  Click one of the controls to add a control assessment.

• Execution, Control Design, Effectiveness, Appropriateness

  Display the overview of the respective assessment criteria of all control assessments.

  This allows you to see at a glance, for example, how often controls have been carried out.

How to proceed

1. In the main menu, select Risks.

   The Risk Management page appears.

2. Select the Control Assessment tab.

   The cards of the tab appear.

3. To restrict the analysis to part of the process landscape, set the Filter to a level of the process hierarchy.

   The analysis covers the control assessments of all processes below this level, whether they are located directly on it or on a lower level.