Risk management, in the SoftExpert Risk Component, starts from the creation of evaluation methods.

Through these records, a company customizes the evaluation of risks and controls in accordance with its needs.

We will create the following evaluation methods:

Create a matrix evaluation method

Before creating the matrix evaluation method, we must create a criterion.

To this end, access the Evaluation > Criterion (RI109) menu and click on the button.

On the screen that will open, fill in the ID # field with the "IPT" value, the Name field with "Impact", then select the "Matrix" option for the Classification field.

Go to the Option tab that will be enabled and click on the button.

On the criterion option data screen, create the "Low", "Moderate" and "High" options with their respective values and icons, as shown in the image below.

After doing that, click on the button from the criterion option and criterion data screens.

Then, repeat the process for the second criterion:

1. Fill in the ID # field with the "PBT" value and the Name field with "Probability".

2. Click on the button, and then, from the Option tab that will be enabled, click on the button.

3. On the criterion option data screen, create the "Low", "Moderate" and "High" options with their respective values, as shown in the image below.

After creating the criteria, access the Evaluation method menu (RI111) and click on the button.

On the screen that will open, fill in the ID # field with "RET" and the Name field with "Risk evaluation".

Select the "Matrix" option for the type and keep the Display field and Display explanation fields checked.

After doing that, click on the button.

Then, go to the Result tab, click on the button and create the possible results for the matrix: "Low", "Moderate", "Extreme".

After doing that, click on the button.

Go to the Matrix tab. In the X axis field, search for the "Impact" criterion, and in the Y axis field, search for the "Probability" criterion.

Now, associate the results with each combination of the matrix axes, as shown in the image below.

Finally, click on the button.

On the screen of the Evaluation method menu (RI111), search for the "Risk evaluation" method and click on the button to release it.

Done. We have successfully created a matrix evaluation method!

Create a quantitative evaluation method

The quantitative method can be an example for the evaluation of control effectiveness.

To create a quantitative method, we will create the "Efficiency" and "Effectiveness" criteria.

To create a criterion, access the Evaluation > Criterion  menu (RI109) and click on the button.

On the screen that will open, fill in the ID # field with the "EFY" value, the Name field with "Efficiency", and keep the "Quantitative" Classification selected.

Then, click on the button.

Go to the Option tab that will be enabled and click on the button.

On the criterion option data screen, create the "Low", "Moderate" and "High" options with their respective values, as shown in the image below.

After doing that, click on the button.

Repeat the steps to create the "Effectiveness" criterion, as shown in the following example.

After creating the criteria, access the Evaluation method menu (RI111) and click on the button.

On the screen that will open, fill in the ID # field with "EOC" and the Name field with "Evaluation of controls".

Select the "Quantitative" option for the type and keep the Display field and Display explanation fields checked.

After doing that, click on the button.

Then, go to the Quantitative tab. The Formula field will be completed by the system.

Then, click on the arrow next to the button and select the "Associate" data.

Associate the previously created "Efficiency" and "Effectiveness" quantitative criteria.

After doing that, click on the button.

Then, go to the Result tab and  create the possible results for the quantitative method: "Low, "Moderate", "Extreme".

On the screen of the Evaluation method menu (RI111), search for the "Evaluation of controls" method and click on the button to release it.

In this way, we have successfully created the quantitative method!

Create a 'simple list' evaluation method.

To create the simple list method, creating criteria is not necessary.

This method can be used for different situations that do not require many customizations.

To create it, access the Evaluation method menu (RI111) and click on the button.

On the screen that will open, fill in the ID # field with the "SPL" value and the Name field with "Simple priority".

Then, select the "Simple listing" option for the type and keep the Display explanation, Display attachment and Display document options checked.

After doing that, click on the button.

On the screen of the Evaluation method menu (RI111), search for the "Simple priority" method and click on the button to release it.

Done. We have successfully created a 'simple list' evaluation method!