...
The context analysis provides the overall risk picture and serves as input to the risk work.
Risk group category: here you can group the risk groups if you have many. It is not necessary to use this categorization. When you have many risk groups, it will be useful to be able to group them using this categorization. The risk reporting function makes it possible to filter out all risks related to a Risk Group category.
Risk groups: In the risk groups, the concrete risks that are relevant to the risk groups are created. You can group in many different ways that suit the individual organisation. You can also tag a risk to several risk groups - then you avoid registering the same risk several times.
Risk: as written above - these are entered in the relevant risk group
Evaluate risk: a risk can be evaluated in several places such as different departments and processes. When evaluating a risk, you can choose one or more consequence axes:
Quality (ISO 9001)
Environment (ISO 14001)
Health and saftey (ISO 45001)
Information security (ISO 27001)
Personal data protection (GDPR)
Emergency preparedness
Possibly enter more/others: Food safety, Economy, Reputation etc.
Control: when evaluating, you enter measures and/or tag relevant security measures to reduce risk / exploit the opportunity.
...
Methodology example
The following illustration shows how a hypothetical business can use the system to build and work with its risks:
...
Risk videos
Risk management overview:
Risk module overview:
Risk module: