Risk - 2.2.1
Customizing control characteristics with the ability to add new options such as Corrective control
In the context of organizations, we can identify several control types and several classifications regarding their function.
The most used classifications are Detective and Preventive, but some compliances have other classifications, such as Corrective.
To improve the flexibility of SoftExpert Suite in control classification, from version 2.2.1 onwards, it is possible to add new control classifications and define the behavior of these characteristics in the residual risk calculations.
This configuration can be performed in the SoftExpert Risk general parameters.
Associating a Workflow with a Risk or Control evaluation, with a rule according to the selected result
According to the severity of the risk or the inefficiency of the control, organizations must define processes to reduce threats and promote opportunities.
In SoftExpert Suite, it is possible to customize this process by using the SoftExpert Process and Workflow components.
Thus, one way of monitoring and ensuring the proper use of these processes is to warn the user, during the Risk or Control evaluation, that the obtained result requires a response, which may be the execution of a workflow.
To use this feature, first, it is necessary to configure, in the Evaluation method, the results that require a Workflow; it is also possible to define which Workflow can be started for a certain evaluation result.
After this configuration, when performing a Risk or Control evaluation, SoftExpert Suite will guide the user to create the Workflow defined in the configurations.
New configuration option for the Risk matrix formula with quantitative criteria
Aiming to enable new configurations for the risk evaluation, from the new version onwards, when using the Quantitative matrix evaluation method, it is possible to customize the formulas of each axis of the matrix by using the criteria defined in the other axis.
Thus, it is possible to use all criteria in formulas, regardless of the associated axis of the matrix.
Change history in the creation of Risks, Opportunities, Controls, Elements, and Treatments
Risk and Compliance Management requires a high level of object traceability.
SoftExpert Suite frequently invests in features that allow quickly identifying changes in objects.
Thus, the change history has been implemented for the creation of risks, opportunities, controls, elements, and treatments.
Viewing audits linked to the plan
From version 2.2.1 onwards, on the plan screen, it is possible to view audits linked to it.
Thus, the system displays the risk and control plan traceability up to performed audits.
Editing the configuration of a context with created plans enabled
From this version onwards, it is possible to change the configurations of the "Allow evaluation only at the revision draft step" and "Block the evaluation that was released in the revision" contexts, even if there are plans already linked to the context.
View the latest improvements made to this component: