I would like to understand out of box Risk Manangement Workflow based on Role. we are working on Qualitative approach.
I am penning down my understanding on Risk Management.
Risk is either Created from Risk Statement or it is created manually and it has following state : "Draft", "Assess", "Respond", "Review", "Monitor" and "Retired
- Which Role will start the workflow ? is it Risk Manager in OOB workflow ?
- Who will move Risk from Draft to Assess ?
- Once Risk Moves to Assess it generates an Assessment, which assessment respondent has to fill . Assessment resposndent are ideally Entity Owner/Risk Owner ?
- After Assessment are filled by Entity owner/Assessment Respondent. who will populates liklihood and impact ? i can see these likelihood and impact fields are manual which implies Risk assessment are only there for reference .
- who is responsible for responding ? is it Risk Manager or Risk Owner ?
- Once you respond to a risk , Risk Response task is created and assigned to Risk Owner?
- In Related links section who will link related controls ?
- Once Risk is Reviewed it comes to Monitor state i believe post which we can use Advanced Risk Assessment to Assess Risk periodically . How does Risk Assessment impact risk Overall Ratings ?
Bascially i want to understand Out of box Workflow for Risk Management ?
Do we have complete demo from Risk Creation and Approval and then Performing RCSA using Advanced Risk Assessment ?
I have attended demo on Advanced Risk Assessment by Mr Uttkarsh Jain which gave a good understanding on Advanced Risk Assessment (RCSA) .
Do we have similar demo for complete life cycle ?
