IMAGE
*** ## Completing the Form Use the **Start Risk Assessment Immediately** form to initiate a risk assessment without delay.IMAGE
{% hint style="success" %} For guidance on common form features and functions, see [**Working with Forms**](/interfacing-help-files/end-users/exploring-apps/working-with-forms.md). {% endhint %} *** {% stepper %} {% step %} ### Define Scope & Parameters Specify the purpose, focus, and context of the risk assessment.IMAGE
* **Purpose of the Assessment:\*** Enter a brief description defining the primary objective of the risk assessment. * **Lead Risk Assessor:\*** Select the user, role, or group responsible for leading and completing the risk evaluation. * **Assessment Reviewer:** Select the user, role, or group responsible for reviewing the assessment results. * **Start of Assessment Period:\*** Select the start date of the assessment period. * **End of Assessment Period:\*** Select the end date of the assessment period. {% hint style="danger" %} The selected end date cannot be earlier than the start date. {% endhint %} * **Focus of the Assessment:\*** Specify the focus area for the risk assessment, defining what it will investigate and evaluate. {% hint style="warning" %} Additional fields will appear based on your selection.IMAGE
To assign an asset, follow these steps: * **Select Folder** * In the **Select an Asset Folder** field, click the :chevron-down: to open a form displaying a tree structure of documentation folders. * Double-click the desired folder to select it. * **Select Asset** * Once a folder is chosen, its contents populate the grid below. * Check the **Selected** box next to the asset you want to assign. * To apply your changes, click **Save Changes** or click outside the grid. * To discard them, click **Discard Changes**. * **Assign Asset** * Click **Assign Selected** to finalize the assignment. * **Review Assigned & Impacted Documentation** * The assigned asset appears in the **Asset to Be Assessed** grid. * Only one asset can be assigned to a risk assessment at a time. To assign a different asset, first remove the current asset by clicking the **Delete** ( :trash-can: ) icon.Confirm deletion by clicking Save Changes or clicking outside the grid. To cancel, click Discard Changes or Undelete ( :xmark: ).
IMAGE
* [**Department:**](#user-content-fn-1)[^1] Select the department to be assessed for risks.IMAGE
To assign a process, follow these steps: * **Select Folder** * In the **Select a Process Folder** field, click the :chevron-down: to open a form displaying a tree structure of documentation folders. * Double-click the desired folder to select it. * **Select Process** * Once a folder is chosen, its contents populate the grid below. * Check the **Selected** box next to the process you want to assign. * To apply your changes, click **Save Changes** or click outside the grid. * To discard them, click **Discard Changes**. * **Assign Process** * Click **Assign Selected** to finalize the assignment. * **Review Assigned & Impacted Documentation** * The assigned process appears in the **Process to Be Assessed** grid. * Only one process can be assigned to a risk assessment at a time. To assign a different process, first remove the current process by clicking the **Delete** ( :trash-can: ) icon.Confirm deletion by clicking Save Changes or clicking outside the grid. To cancel, click Discard Changes or Undelete ( :xmark: ).
IMAGE
* [**Product:**](#user-content-fn-2)[^2] Select the product to be assessed for risks. {% hint style="warning" %} When a product is selected, the following read-only fields are automatically populated with available information. * **Identifier:** The unique identifier assigned to the selected product. * **Device Class:** The device class or category to which the product belongs. * **Status:** The current status of the product. * **Version:** The version number or iteration of the product. {% endhint %}IMAGE
* [**Project:**](#user-content-fn-3)[^3] Select the project to be assessed for risks.IMAGE
To assign a risk, follow these steps: * **Select Folder** * In the **Select a Risk Folder** field, click the :chevron-down: to open a form displaying a tree structure of documentation folders. * Double-click the desired folder to select it. * **Select Risk** * Once a folder is chosen, its contents populate the grid below. * Check the **Selected** box next to the risk you want to assign. * To apply your changes, click **Save Changes** or click outside the grid. * To discard them, click **Discard Changes**. * **Assign Risk** * Click **Assign Selected** to finalize the assignment. * **Review Assigned & Impacted Documentation** * The assigned risk appears in the **Risk to Be Assessed** grid. * Only one risk can be assigned to a risk assessment at a time. To assign a different risk, first remove the current risk by clicking the **Delete** ( :trash-can: ) icon.Confirm deletion by clicking Save Changes or clicking outside the grid. To cancel, click Discard Changes or Undelete ( :xmark: ).
IMAGE
To assign a capability, follow these steps: * **Select Folder** * In the **Select a Capability Folder** field, click the :chevron-down: to open a form displaying a tree structure of documentation folders. * Double-click the desired folder to select it. * **Select Capability** * Once a folder is chosen, its contents populate the grid below. * Check the **Selected** box next the capability you want to assign. * To apply your changes, click **Save Changes** or click outside the grid. * To discard them, click **Discard Changes**. * **Assign Capability** * Click **Assign Selected** to finalize the assignment. * **Review Assigned & Impacted Documentation** * The assigned capability appears in the **Capability to Be Assessed** grid. * Only one capability can be assigned to a risk assessment at a time. To assign a different capability, first remove the current capability by clicking the **Delete** ( :trash-can: ) icon.Confirm deletion by clicking Save Changes or clicking outside the grid. To cancel, click Discard Changes or Undelete ( :xmark: ).
IMAGE
* [**Supplier:**](#user-content-fn-4)[^4] Select the supplier to be assessed for risks. {% hint style="warning" %} When a supplier is selected, the following read-only fields are automatically populated with available information. * **Representative Name:** The name of the representative associated with the selected supplier. * **Representative Email:** The email address of the supplier’s representative {% endhint %}IMAGE
* **Other:** Specify the custom risk category to assess.━━━━━━━━━━━━━━━━━━━━━━━━━━━
**Read-Only Fields** (🔒) * **Assessment ID:** A system-generated, unique identifier used for tracking and reference. {% hint style="warning" %} This ID is assigned upon submission:IMAGE
{% endhint %} *** {% endstep %} {% step %} ### Initiate Risk Identification & Evaluation (Optional) Indicate whether you want to begin risk identification and evaluation immediately.IMAGE
* If **Yes**, proceed to document and evaluate risks in the **Risk Identification & Evaluation** section. → See: [Identify & Evaluate Risks](#identify-and-evaluate-risks-optional) {% hint style="warning" %} If not initiated, risk identification and evaluation is deferred and addressed during the [execution phase](/interfacing-help-files/risk-analysts/risk-application/creating-and-managing-risk-assessments/execute-risk-assessment.md) by the designated lead assessor. {% endhint %} *** {% endstep %} {% step %} ### Assign Questionnaire (Optional) From the **Analysis Questionnaire** dropdown, select a questionnaire to assign to the risk assessment.IMAGE
Upon selection, a grid will appear, displaying the list of questions contained within the questionnaire. {% hint style="danger" %} If a questionnaire is selected in this section, the **Risk Assessment Questionnaire (Optional)** accordion will be shown to the lead risk assessor in the [**Execute Risk Assessment**](/interfacing-help-files/risk-analysts/risk-application/creating-and-managing-risk-assessments/execute-risk-assessment.md) task. If no questionnaire is selected, the accordion will be hidden. {% endhint %} *** {% endstep %} {% step %} ### Document Analysis Findings (Optional) Document any analysis performed in support of the risk assessment.IMAGE
* **Summary of the Analysis:** Provide a high-level summary of the analysis performed, including key observations, findings, and conclusions. * **Provide Analysis Documentation:** Upload supporting files, reports, evidence, or other documentation relevant to the analysis. * **Analysis Tools:** Select the analysis tools used to support the assessment. {% hint style="warning" %} Additional fields will appear based on your selection.IMAGE
To draw, simply drag your cursor or stylus across the drawing area. To erase or undo your drawing, click the **Erase** ( :eraser: ) button.IMAGE
IMAGE
Click **Add** to create a new entry. A new row will appear in the grid. * **Process Step:** Specify or describe the process step being analyzed. * **Failures:** Identify potential failure modes or ways in which the process step could fail. * **Effect:** Describe the potential effects or consequences of each failure mode. * **Cause:** Identify the root causes or reasons behind each failure mode. * **Severity:** Rate the severity of each failure mode. * **Occurrence:** Rate the likelihood of each failure mode occurring. * **Detection:** Rate the likelihood of detecting each failure mode before it causes an impact. {% hint style="info" %} The **Severity**, **Occurrence**, and **Detection** ratings are typically assessed on a scale of 1 to 10. {% endhint %} {% hint style="info" %} To apply changes, click **Save Changes** or click outside the grid. To cancel, click **Discard Changes**. {% endhint %} Upon saving the row, the **Risk Priority** and **Criticality** values are automatically calculated based on the **Severity**, **Occurrence**, and **Detection** ratings assigned to each failure mode. Equations: * Risk Priority (RP) = Severity (S) × Occurrence (O) × Detection (D) * Criticality (C) = Severity (S) × Occurrence (O) These values determine the overall prioritization (RP) and criticality (C) of each failure mode.IMAGE
Click **Add** to create a new entry. A new row will appear in the grid. * **Risk Name:** Enter a name that clearly identifies the risk. {% hint style="info" %} To apply changes, click **Save Changes** or click outside the grid. To cancel, click **Discard Changes**. {% endhint %} Once a risk is added, the following actions are available: * **Edit** ( :pen: ): Click to evaluate or analyze the identified risk.IMAGE
1. **Define Risk** Provide general information about the identified risk. * **Risk Name:** Update the name of the identified risk. * [**Risk Type:**](#user-content-fn-5)[^5] Select the category that best describes the identified risk. * [**Risk Matrix:**](#user-content-fn-6)[^6] Select the risk matrix that will be used to evaluate the risk. {% hint style="info" %} Upon selection, the options inside the **Impact**, **Probability**, and **Detectability** dropdowns are automatically updated to reflect the parameters of the chosen risk matrix. {% endhint %} * **Description of the Risk:** Provide a detailed description of the identified risk, including relevant context and concerns. *** 2. **Document Causes & Effects** Use the **Cause(s) and Effect(s)** grid to document the causes and effects associated with the identified risk. * Click **Add**. * In the newly added row: * **Cause:** Specify the cause contributing to the identified risk. * **Effect:** Describe the potential effect or consequence resulting from the identified risk. * Click **Save Changes** or click outside the grid to save. * To cancel, click **Discard Changes**. {% hint style="info" %} #### Managing Causes & Effects To remove a cause-and-effect entry, click the **Delete** ( :trash-can: ) icon. * Confirm deletion by clicking **Save Changes** or clicking outside the grid. To cancel, click **Discard Changes** or **Undelete** ( :xmark: ). {% endhint %} *** 3. **Evaluate Risk** Assess the risk using the selected risk matrix. * **Impact:** Select the value that best represents the potential consequence of the risk. * **Probability:** Select the value that best represents the likelihood of the risk occurring. * **Detectability:** Select the value that best represents the likelihood of detecting the risk before it results in an impact. {% hint style="warning" %} The **Score** is automatically calculated based on the selected **Impact**, **Probability**, and **Detectability** values. * For more information on how the score is calculated, refer to the [**Scoring Framework**](/interfacing-help-files/risk-analysts/risk-application/creating-and-managing-risk-assessments/execute-risk-assessment/scoring-framework.md). Upon saving the form, the calculated score automatically populates the corresponding row in the grid within the **Risk Identification & Evaluation** accordion. {% endhint %} *** 4. **Register Risk** Specify where the identified risk will be stored. * **Select the Folder:** Select the folder where the identified risk will be added or stored. * Instead of a dropdown menu, this field opens a form. * In this form, navigate through the tree structure displaying risk folders. To select a folder, simply double-click it. * The selected folder name will populate the **Folder Name** field. * **Identifier:** Enter a unique identifier for the risk. *** 5. **Save Changes** When ready to save, choose one of the following options: * **Previous:** Click to save your changes and return to the previous risk. * **Save and Close:** Click to save your changes and close the form. * **Next:** Click to save your changes and proceed to the next risk.| Cover image | |||
|---|---|---|---|
| Tracking & Monitoring Risk Assessments | View the status and progress of risk assessments throughout their lifecycle. | App-V16-Icons-1.png | Tracking & Monitoring Risk Assessments |
| Managing Risk Assessment Questionnaires | Create, review, and maintain questionnaires used to gather structured information during risk assessments. | App-V16-Icons-1.png | Managing Risk Assessment Questionnaires |
