Camms is pleased to bring you the Quarterly Product Release Note for Camms.Risk.

This quarter we've got a number of exciting new features and enhancements to improve your user experience within the system, which was deployed to your Test environment on 20th March 2021 and will be deployed to your Live instance on 3rd April 2021.

This enhancement will let you create a corresponding audit recommendation (in the audit module) from a risk treatment action; automatically creating a link between these two.

How do you configure this?

• Users with the ‘Editor’ permissions for all Risk types, 'Show Audit' permission, and 'GOV/OHS Audit Administrator' permissions in the standard permission framework (accessed via Camms.Risk > Administration > Manage Users) or ‘Risk Solution’ permissions for all Risk types, 'View' permissions for Audit and Finding, and 'Edit' permissions for Recommendation in the new flexible hierarchy framework [currently in beta] (accessed via Camms.Risk > Administration > Role Management > Permission), will be able to create an Audit Recommendation when creating linkages.

How does this work?

• There are two ways in which a linkage between a Risk Action and an Audit Recommendation can be created.

  • Using an existing audit recommendation

  • Creating a new audit recommendation

Linkage using an existing audit recommendation

• To create a linkage using an existing audit recommendation, go to the Links tab, and select 'Audit Recommendation' in the 'Create a new linkage' dropdown. The following multi-select dropdown filters will be displayed, where you can filter from existing audit recommendations in the grid below and create a linkage:

  • Audit Title – Select from the list of audit titles to filter from.

  • Audit Finding – Based on the selected audit titles, audit findings will be filtered and listed to be selected from.

  • Organisational Links – An independent filter to select business units (for standard permission clients) / organisational links (for flexible permission clients) within the organisation hierarchy to filter existing audit recommendations in the organisation. This filter will apply to all audits that have a direct linkage to the business unit / organisational link.

Open

Figure 1.1: Filter details to select from existing audit recommendations

• Once filtered, the existing audit recommendations will be listed in the grid below, with the following details:

  • Audit Title – This column will display the titles of all audits selected in the filter. Details will be further filtered to list only those that have a direct linkage to the filtered business unit/organisation.

  • Audit Finding – This column will display only audit findings that are linked to the selected audit title.

  • Audit Recommendation Number – This column will display the audit recommendation number of the existing audit recommendation listed.

  • Audit Recommendation – This column will display the recommendation title based on the selected Audit Title and Finding.

• To make a linkage, select the 'Link' checkbox next to the listed audit recommendation, and click the Save button at the top of the page.

Open

Figure 1.2: Existing audit recommendations filtered to be linked

Linkage creating a new audit recommendation

• To create a linkage using a new audit recommendation, go to the Links tab, and select 'Audit Recommendation' in the 'Create a new linkage' dropdown.

• You can filter Audit Titles and Finding Titles in the filters section if needed. If not, from the grid itself select from the following column dropdowns:

• To make a linkage, select the 'Link' checkbox next to the listed audit recommendation, and click the Save button at the top of the page.

• The following mandatory fields will be auto populated in the Audit Recommendation page from for Risk Action Details page.

  • Audit Recommendation Title

  • Audit Recommendation Owner

  • Audit Recommendation Original Due Date

  • Audit Recommendation Review Frequency

  • Audit Recommendation % Complete

  • Audit Recommendation Status

  • Audit Recommendation Comments

  • Organisation Linkages

• Once saved, the audit recommendation is created and a linkage is created between the audit recommendation and the risk action. The new audit recommendation will be listed in the Audit Recommendation Register too.

• Once a link is created between an Audit Recommendation and a Risk Action, the following fields can be made to synchronise respectively:

  • Audit Recommendation field: Percentage Complete = Risk Action field: Percentage Complete

  • Audit  Recommendation field: Status Report Summary = Risk Action field: Comment

  • Audit  Recommendation field: Action Status = Risk Action field: Action Status

  • Audit Recommendation field: Responsible Officer = Risk Action: Responsible Officer

• The Risk Action linkage will display within the ‘Links’ tab of the newly created Audit Recommendation.

• If you ‘Delete’ the link, this will only delete the linkage between the Risk Action and the Audit Recommendation and not the Audit Recommendation.

This enhancement will enable you to customise the layout of the Project Risk register as per your individual preference and save the setting to apply in your profile in the future as well.

How do you configure this?

• Users with the ‘Project Risk Viewer’ permission in the standard permission framework (accessed via Camms.Risk > Administration > Manage Users) or ‘Register’ permission in the new flexible hierarchy framework [currently in beta] (accessed via Camms.Risk > Administration > Role Management > Permission > Project Risk), will be able to view the Project Risk Register and customise the layout.

• A new 'settings' icon will be available at the top-right hand corner of the 'Project Risk Register' window. Click this settings icon to open the 'Quick Settings' popup, where you can customise the layout of the Project Risk Register according to your preference and save the layout.
  
  

How does this work?

• Go to the Project Risk Register and click on the settings icon to open the ‘Quick Settings’ popup window. You can customise the order and visibility (show / hide) of fields in the grid. Click on Save to save the layout.

• Fields listed in the 'Quick Settings' popup window will be based on the following criteria:

• To change the order of fields, 

  • Click on the checkbox(es) under the 'Ordering' column and click on the Top, Up, Down, Bottom buttons to move the field(s) right to the top, one field up, one field down and right to the bottom respectively OR

  • Drag and drop the field to the position you wish using the three dots on the right hand side of the field.

• To change the visibility of fields use the checkboxes under the 'Visible' column next to the fields. This will show / hide fields in the register.

• Click on the Restore Default button to restore the default layout of the Project Risk Register that has been configured via the Risk Settings > Register Configuration > Project Risk Register page. Once the default layout is restored, all layout changes done on Risk Settings > Register Configuration > Project Risk Register will apply thereon.

• Once you are happy with the layout, click on Save. The saved layout will remain thereon - even after page refreshes and future log-in's too.

This feature is to provide the ability to select multiple secondary risk categories and its related sub categories for a risk.

How do you configure this?

• Users with the ‘Editor’ permissions for all Risk types in the standard permission framework (accessed via Camms.Risk > Administration > Manage Users) or ‘Add’ permissions for all Risk types in the new flexible hierarchy framework [currently in beta] (accessed via Camms.Risk > Administration > Role Management > Permission), will be able to configure this field as a multi-select dropdown.

• 'Sub Categories' and its 'Secondary Categories' requires to be added in the Categories page (accessed via Camms.Risk > Framework > Risk Settings) to be able to select multiple sub categories and secondary categories.

• For Strategic and Project Risk types, the ‘Sub Categories and Secondary Categories’ field requires to be set as 'Visible' in the Field Configuration page (accessed via Camms.Risk > Framework > Risk Settings > Field Configuration), to be able to select this field as a multi-select dropdown.

• The ‘Sub Categories and Secondary Categories’ field will be a hyperlinked field which you can click and select to 'Show Risk Secondary Category', which will display only secondary categories in the dropdown (as Figure 3.2), or select 'Show Risk Sub Category', which will display only the sub categories of the primary risk category in the dropdown (as Figure 3.2), or select both options to display all sub categories of the primary risk category and secondary risk categories and its sub risk categories (as in Figure 3.2).

• For Operational and Corporate Risk types, if the external settings ‘Hide Risk Sub Categories in Initial Risk Assessment Screens’ and ‘Hide Secondary Risk Category’ has been unticked, in the Configurations page (accessed via Camms.Risk > Administration > Configurations > Settings), you will be able to select risk sub categories and secondary risk categories via one field.

How does this work?

• Once the 'Sub Categories and Secondary Categories' field is configured and/or the external setting, ‘Hide Risk Sub Categories in Initial Risk Assessment Screens’ and ‘Hide Secondary Risk Category’  is not ticked, based on the risk type, a multi-select dropdown field will appear in the Initial risk assessment page, where you can select one or more risk sub categories for a primary category and/or secondary categories.

• The primary risk category will be unticked and disabled.

• For Strategic and Project risks, if the field is made visible for the Revised/Current and Future assessment tabs, the categories will display as an un-editable label.

• Risk register filters in the following pages will display the multi-select dropdown to filter risk records:

  • Quick Risk Action Search

  • Executive Intelligence

  • Risk Analysis

  • Dashboards

How is this reflected within Risk Reports?

• The 'Risk Register Report' has been updated to include this modification where two new options 'Risk Sub-Categories' and 'Secondary Risk Category' appears within the 'Show Fields' report controller.

  • These two options will only appear in the instance when the risk setting has been configured as visible (as mentioned above) within at least one risk type.

  • If the setting has not been configured within at least one risk type, the options will not be available within the 'Show Fields' report controller.

• Once ticked, the fields will be visible within the report separately as 'Secondary Risk Category' and 'Risk Sub-Categories'.

A new email recipient called 'Secondary Risk Owner' is introduced in order to send email notifications to. An administrator will be able to configure the Secondary Risk Owner as an email recipient for email rules. Once configured, email notifications will be sent out to the Secondary Risk Owners based on the configured trigger criteria.

How do you configure this?

• Users with the ‘Administrator’ permission in the standard permission framework (accessed via Camms.Risk > Administration > Manage Users) or ‘Add’ and/or ‘Edit’ permissions in the new flexible hierarchy framework [currently in beta] (accessed via Camms.Risk > Administration > Role Management > Permission > Risk Administration), will be able to configure this new email recipient type.

• Enable multiple risk owners  to view the 'Secondary Risk Owner' as an email recipient and to view the relevant code snippets, by enabling the 'Multiple Risk Owners' setting (accessed via Camms.Risk > Framework > Risk Settings > Initial Settings).

• You can configure the ‘Secondary Risk Owner’ to be displayed in Strategic and Project risk types via Camms.Risk > Framework > Risk Settings > Field Configuration > Strategic Risk / Project Risk > Secondary Risk Owner.

• You can configure a secondary risk owner as an email recipient via Camms.Risk > Administration > Risk Administration > Email > [select Secondary Risk Owner].

• You can configure an email template by incorporating the ‘Secondary Responsible Officer’ code snippet via Camms.Risk > Administration > Risk Administration > Email Templates > [select Secondary Responsible Person]. Once this code snippet is added, it will display the name of the Secondary Responsible Person when an email is triggered.

How does this work?

• The ‘Secondary Risk Owner’ recipient type will be available for all email trigger criteria except for ‘Solution Assignment’ and ‘Control Assignment’ email trigger types.

• Emails can be configured to be sent to 'Secondary Risk Owners' of Strategic, Operational, Project and Corporate risks.

• If the ‘Secondary Risk Owner’ is configured as a non-mandatory field, emails will be sent out only if the risk has associated 'Secondary Risk Owners'.

• If multiple 'Secondary Risk Owners' have been configured, all Secondary Risk Owners will be notified based on the configured trigger.

This feature will ensure that reports are compatible with the 'Hide Risk Review' feature introduced in the Camms.Risk application, and further permitting risk review and risk action related commentary to be depicted within the reports.

• Once the Toggle button for the 'Risk Review' tab has been turned off, the 'Last Review Date', 'Next Review Date' and the 'Commentary' sections within the Risk Heatmap report will be hidden.

• The newly introduced commentary filters within the 'Risk Heatmap' report, will further permit you to show/hide risk review related comments.

• Click on the 'Show Review Comments' tick box to permit all comments within the Risk Review tab to be displayed, and click the 'Show Risk Solution Comments' tick box for comments related to risk actions to be shown within the report.

  • All comments will be displayed between the 'Causes/Consequences' and 'Existing Risk Control' sections of the report.

  • Comments related to Risk Actions will be displayed under each respective Action.

• Once the Toggle button for the 'Risk Review' tab has been turned off, the 'Last Review Date' and 'Next Review Date' fields within the Risk Overdue Summary report will be hidden.

• This enhancement will permit you to extract all standard fields available within the 'Risk Review' tab into the 'Risk Register' report.

  • A new filter grouping depicting the fields within the 'Risk Review' tab will be enabled within the 'Show fields' filter control, right beneath 'Risk Treatment Actions’.

• These fields will be ticked-off by default, but once enabled, these will appear within the report after the ‘Completed Date’ column.