Risk MOD009AB0

Access

• Project panel → Further… → Risks/Opportunities → Click on the Insert risk plus-button in the Risks area → Risk

• Project panel → Further… → Risks/Opportunities → Click on the link on the ID of the required risk in the Risks area → Risk

• Program panel → Further… → Risks/Opportunities → Click on the Insert risk button in the Risks area → Risk

• Program panel → Further… → Risks/Opportunities → Click on the link on the ID of the required risk in the Risks area → Risk

For information

• In the Risk module,

  • risks are recorded and evaluated,

  • measures for risk treatment are recorded,

  • implemented treatment steps or actions are recorded, and

  • risk reevaluation is carried out.

• The responsible employee can edit the data for the corresponding measure(s).

  • This way, he/she informs the project manager on the success of the measure in question.

This module supports the identification and evaluation of risks in accordance with ISO/IEC 27001.

Identify, Evaluate, and Manage Risk

Procedure

• Allocate a Name.

• Save.

• Newly created risks are automatically assigned a risk ID and are active by default (Active checkbox activated). Active risks are

  • considered in analyses and status reports,

  • displayed in the charts, or

  • the probable damage is only calculated for active risks in the eponymous field.

Carry Out Risk Evaluation

Information

• PLANTA project offers an option to perform a qualitative and monetary evaluation of recorded risks.

It is recommended that only one risk evaluation method be used.

Carry out qualitative evaluation and risk treatment.

• In the Qualitative evaluation area,

  • the text fields describe a potential vulnerability and the resulting threat.

• In the Without risk treatment area

  • make an estimation of the risk before risk treatment in the Damage extent and Probability of occurrence listboxes.

    • The categories selected in both listboxes are used to calculate the risk assessment without risk treatment and to display it in the corresponding diagram.

• In the With risk treatment area

  • the Risk treatment field lists measures that have already been implemented and contribute to risk minimization.

    • Risk management measures are usually defined or adjusted at regular internal company meetings, where key stakeholders discuss the risks associated with company assets.

  • Make an estimation of the risk with risk treatment in the Damage extent and Probability of occurrence listboxes, i.e., taking into account the effects of measures already implemented.

    • The categories selected in the two listboxes are used to calculate the risk assessment with risk treatment and to display it in the corresponding diagram.

    • If no risk treatment has been performed yet (and entered in the Risk treatment field), the values of the risk assessment without risk treatment are automatically adopted in the With risk treatment area.

  • Save.

Carry Out Monetary Evaluation

• In the Monetary evaluation area

  • Make an estimation of the risk in the Possible damage (EUR) and Probability (in %).

    • This input forms the basis for the visualization of risks in the corresponding diagram.

  • Save.

Record Measure

Information

• Measures are taken to minimize risks preventively or to deal with them actively, since

  • risks increase the costs or trigger provisions.

Details

• By default, new measures receive the Status = "Pplanned".

• Only measures with Status = "Completed" can be included in the risk treatment.

• Records of measures with Status = “Implemented,” "Completed", or "Rejected" are displayed in gray.

Measures are planned actions that are used to address identified risks. However, newly recorded measures do not automatically become part of risk treatment. Only after successful implementation and targeted transfer to the risk treatment process can the measures and their effects be taken into account in future risk evaluation.

Procedure

• Click on the Insert measures plus-button in the Measures area.

  • Newly created measures are automatically assigned a measure ID.

• Briefly describe the measure.

• A Person responsible is to be assigned to keep an eye on the development.

• Enter other information or provide details.

• Save.