Overview
The Risk Management module captures risks that may occur in your organisation. Risk Management is managed via the Central Risk Library and Site Risk Register.
Central Risk Library – Usually managed by a risk team to assess overall risks.
Site Risk Register – Allows managers to assess and control risks at their site.
This document provides guidance on how the module works, options for configuration, and actions required to complete your configuration requirements for implementation.
Your Implementation Manager will share the timeframes for completing this workbook in the project plan.
Key Features
Each key feature mentioned below builds upon the last diagram to build understanding before the ‘bringing it all together’ diagram which shows all features and the flow of the module.
Workflow
The Workflow outlines the key stages that a module works through and is used as the framework for other aspects of the build. Each key stage is represented by a bubble icon and any relevant checks that may interact with the flow written on the progress lines.
The Central Risk Library and the Site Risk Register work in very similar ways. The key difference is that the Site Risk Register draws Risk details from the Central Library and this auto populates a risk description and recommended controls that can be referenced when adding site specific risks.
Involvements
Involvements capture the People Involved in the Risk Management. This module allows the addition of Involvements once the Risk is added.
Involvements are represented by the addition of the blue person boxes below (also known as swim lanes).
Forms
Areas where users can input information are called forms and usually contain a list of questions. The Main Form is the starting point of a user’s interaction with the module and all other forms are called Subforms. Forms are represented by the Page Icons added below and align under the person/stage completing the forms.
Risk Matrix
The Risk Management Module uses a Risk Matrix to determine the Inherent and Residual Risk Rating. The same Risk Matrix is used throughout the account and represented in the flow diagram with a grid icon.
Notifications and Actions
This module includes Notifications and Actions to assist your users successfully action and resolve records.
In our flow diagram, Notifications and Actions are represented by the below icon.
Additional Features
Indicators
Indicators gather important information from the module to provide a visual reference on the record page and in registers.
Bringing it All Together
Overview of Configuration
The risk module aims to achieve a best practice solution however we understand that each client is unique. The following configuration can accommodate your unique needs:
10 question changes (that are not mandatory as part of the automations)
Changing a question (question text, help details)
Adding new questions to a form
Marking a question as mandatory
Changing the order of questions in a form
Removal of questions (that are not mandatory as part of the automations)
Notification adjustments –
Adjustments to the body text of core notifications and logo
Up to 3 new configurable notifications for this module
Customise the timeframes for each of the timeframe-based notifications
Risk Matrix –
Use of the inbuilt Risk matrix or a new Risk Matrix to be used throughout your account. Please review the available supporting document “Risk Matrix Guidance and Workbook’ for more information.
Configuration options are referred to as ‘Configuration Requirements’. Further information on how to complete your Configuration Requirements is outlined in the next section.
Configuration Requirements and Actionable Items
After the walkthrough of the Risk Management module, you will be provided access for a more in-depth look. We encourage you to take this opportunity to review the specifics of the module and complete the configuration requirements below.
There are two supporting Guidance documents for this Module:
“Question Guidance” provides detailed information on the types of questions you can include in forms.
“Risk Matrix Guidance and Workbook” provides details and configuration needed to configure a custom matrix. Please note that there is one custom matrix possible per account so you may have already configured your matrix in a previous module.
Risk Creator Changes:
This includes the main form where the user creates the risk record. There is a separate Main form for the Central Risk Library and the Site Risk Register.
Form changes can include:
10 question changes (that are not mandatory as part of the automations)
Changing a question (question text, help details)
Adding new questions to a form
Marking a question as mandatory
Changing the order of questions in a form
Removal of questions (that are not mandatory as part of the automations)
Assessment Form Changes:
This includes the Assessment form in the Central Risk Library and the Site Risk Register. A Inherent and Residual Risk Matrix also appear on this form.
Form changes can include:
10 question changes (that are not mandatory as part of the automations)
Changing a question (question text, help details)
Adding new questions to a form
Marking a question as mandatory
Changing the order of questions in a form
Removal of questions (that are not mandatory as part of the automations)
Risk Matrix change:
Option to use the inbuild risk matrix or make changes to the risk matrix. Note that if a new Risk Matrix is developed, this will be used throughout all modules with a Risk Matrix in your account. (Note: this may have been completed/determined in a previous module)
Review Form Changes:
This includes the Review form in the Central Risk Library and the Site Risk Register. A Residual Risk Matrix also appears on this form.
Form changes can include:
10 question changes (that are not mandatory as part of the automations)
Changing a question (question text, help details)
Adding new questions to a form
Marking a question as mandatory
Changing the order of questions in a form
Removal of questions (that are not mandatory as part of the automations)
The Risk Matrix was determined earlier in the assessment form changes.
Notification Changes:
There are notifications set to send after certain triggers in the workflow of the module to prompt users via email to action certain tasks.
Changes can include:
Addition of your logo to the Notifications
Changes to the body text of the Notification
Change to the timeframes of overdue timeframe notifications
The current notifications are outlined below, and space has been provided if you wish to change the body text of the message. All notifications will contain a link to the record.
Changing the text is not necessary if the current message suits your needs.
Questions?
During the implementation of this module, project and Hypercare period, your Implementation Manager is happy to provide support and guidance and we encourage you to reach out with any queries.
At the completion of the Hypercare period, your Implementation Manager will advise you of your new contact for support.