Open

Camms is pleased to bring you the latest features and enhancements to be included in our newly evolved Camms.Risk,solution. 

These essential upgrades will improve performance and enhance the user interface and experience within the application, ensuring that you have all the latest functionality for effectively managing GRC.

Open

We have introduced a set of new functions on several pages, that will enhance your experience when using the Camms.Risk application.

1.1 Login page

• The login page will have a few modifications from its previous look and feel. These will include:

  • A show/hide password icon will be displayed in the Password box where you can click this icon to display the password you key in the box. If you do not click on this icon, the password will be displayed as asterisks (*) when keyed in.

Open

 Figure 1.1.1

• Error messages when an incorrect username or password is entered will now display under the respective field.

Open

Figure 1.1.2

1.2 Pagination and page navigation

• New additions to pagination and page navigation, where you can select the number of records to display in a single page using the bottom left panel and navigate to the first, previous, specific page number, next, and last pages using the bottom right panel. 

Open

Figure 1.2.1

Open

Figure 1.2.2

1.3 Help text icon displayed next to fields

• The help text that is configured to be displayed for fields on various pages, will now be displayed when hovered over the icon displayed next to its fields. 

Open

Figure 1.3.1

1.4 Search option in dropdown fields

• Some dropdown fields will have a search option at the top of the dropdown, where you can key in the value you are looking for and select it.

Open

Figure 1.4.1

1.5 Suggestive text in fields

• Some fields will suggest text while you key in values when a value already exists. While typing a new value, if that value exists, it will filter it down, and you can select the same value or change it to a value you wish.

Open

Figure 1.5.1

1.6 Collapse/Expand Individual heatmap and risk assessment panel

• In the risk details page, a collapse/expand panel has been introduced to the individual heatmap and risk assessment section providing users maximum space to view the other details.

• This panel will be expanded by default and if the user prefers to hide this section, the panel can be collapsed by clicking on the arrow.

Open

Figure 1.6.1

Open

Figure 1.6.2

1.7 Collapse/Expand Risk Settings panel

• The Risk Settings page will have a collapse/expand icon which will let you hide/show other Setting pages to make more room when configuring a setting.

Open

Figure 1.7.1

Open

Figure 1.7.2

1.8 Lengthy page descriptions in Risk Settings pages displayed in a tooltip

• Risk Settings pages that have lengthy page descriptions at the top of the page, will be shortened with a … at the end of the page size has been reduced, and when hovered upon will display the full help text in a popup text.

Open

Figure 1.8.1

1.9 Add New/Edit popup windows and Delete function

• Adding details is now done via a popup window by clicking the Add New button at the top of the grid, filling in details, and clicking the Add button in the popup window.

• Clicking on the Edit button in each record row will, in turn, open a popup window as well, where you can edit details and click Save.

• Clicking on the Delete button in each record row will, in turn, remove the record after confirming the deletion. However, you will not be allowed to delete a record if any associations are linked to that record.

Open

Figure 1.9.1

Open

Figure 1.9.2

1.10 Availability of filters in table header column fields

• If you want to filter records displayed in a table, for a specific column, if a filter icon is available, you may click on this and enter the value you wish to filter by and click on Filter. This will then filter records in that column based on the filtered value.

Open

Figure 1.10.1

1.11 On/Off toggle buttons

• Some fields will require you to turn it ON or OFF. In these instances, there will be toggle buttons where you can change the ON/OFF value by clicking on it.

Open

Figure 1.11.1

1.12 The ‘Save’ button will not be enabled until mandatory fields have been filled.

• In the risk details page and all popups across Camms.Risk the Save button will not be enabled until all mandatory fields in the relevant page or popup have been filled in or any change has been done for already saved records.

Open

Figure 1.12.1

With this new feature, widgets will be displayed with summery details at the top of the Quick Update page, with the total number of Risks and Risk Actions assigned for thr the logged-in user, to take action upon.

• Widgets will be displayed at the top of the Quick Update page displaying the total number of responsibilities assigned for each responsibility type that your organisation has activated, categorised by Risk Type and additionally grouped by Entities for Project Risk Types.

• The number displayed here will represent the total number of items the logged-in user is responsible for each responsibility type. However, if the details are filtered, then the number displayed here, will represent the filtered number of items the logged-in user is responsible for.

Open

Figure 2.1.1

2.1 My Risks

• My Risk widget will display the risks assigned to the logged-in user; the risks will be categorised by Risk Type and additionally grouped by Entities for Project Risk Types.

• To update details, click the More Details button at the right corner of each record, which will open a popup window, displaying the Risk record to be updated or viewed. From here, you can update Risk details and click the Update button.

Open

Figure 2.1.1

• A pop-up window displaying the Risk record details will be opened by clicking on the More Details button at the right corner of each record. The pop-up window will have three tabs namely;

  • Risk Details

  • History

  • Email

2.1.1 Risk Details

• A banner will be displayed with the Inherent, Residual and Target Risk ratings, appetite ratings, and aggregated risk ratings if enabled.

• The user will be able to navigate across the inherent, residual, and target assessment tabs along with risk action tabs.

• The fields which are displayed in these tabs can be configured in the configuration area to allow the respective fields to be displayed in my quick update more details view of a specific risk.

2.1.1.1 Inherent/Residual and Future risk assessment tabs 

• These tabs will show the fields that are configured to show in My Quick Update in each risk assessment phase (Access field configuration area via Main Menu > Risk Settings > Field Configuration > Risk > [Select Risk type] > [Select Risk Assessment phase] > [Checked fields in ‘Quick Update’ column]).

• If the Risk Assessment field is configured to show in My Quick Update, the criteria required for the risk assessment (such as Likelihood, Consequence etc.), Risk Rating, Appetite rating, and Aggregated rating will be shown along with the Risk Heat Map. 

• The risk assessment can be performed via quick update by updating the criteria (such as Likelihood, Consequence etc.).

2.1.1.2 Action Tab 

• A grid will be shown with the risk actions linked to the selected risk. 

• The columns shown within the grid will be based on the configuration (Access field configuration area via Main Menu > Risk Settings > Field Configuration > Action > Details > [Checked fields in ‘Visible in Actions Grid’ column]). Risk actions can be updated inline via the grid based on the permissions of the user.

Open

Figure 2.1.1.2.1

2.1.1.3 Controls Tab

• A grid will be shown with the controls grid linked to the selected risk. 

• The columns shown within the grid will be based on the configuration (Access field configuration area via Main Menu > Control Settings > Field Configuration > Details [Checked fields under ‘Quick Update’ column will reflect in the grid in Quick Update]).

Open

Figure 2.1.1.3.1

2.1.1.4 Risk Review Fields

• The risk review fields will be displayed based on the configuration (Access field configuration area via Main Menu > Risk Settings > Field Configuration > Risk > [Select Risk type] > [Select Risk Review] > [Checked fields in ‘Quick Update’ column]) throughout all the tabs (Inherent, Residual, Target, Action and Controls) allowing the user to update and complete the review.

2.1.1.5 Updating and Completing the Risk Review

• Cancel – Clicking on the Cancel button will redirect to the My risks section of the My Quick update without saving the latest information if entered.

• Update – Clicking on the Update button will show a Warning message informing the user clicking on ‘Yes’ will save both risk and review information and clicking on ‘No’ will only save the risk information.

• Complete Review – This button exists only to complete the risk review of a specific risk. Clicking Complete Review will save any information entered in the Risk review section and complete the review.

Open

Figure 2.1.1.5.1 

2.1.2 Risk History

• Clicking on the History tab on the top horizontal navigation bar will allow the user to view the trail of history logs if any changes have been made to the risk.

Open

Figure 2.1.2.1  

• Clicking on either the Inherent, Residual, Future Assessment or Risk Review tabs will allow the user to view the previous changes on each respective tab.

• Clicking on a history record will Display the Summary of the changes made to that specific record.

Open

Figure 2.1.2.2

• Clicking on the current representation tab will allow the user to view the latest changes.

Open

Figure 2.1.2.3

• Clicking on the Previous Representation tab will allow the user to view the version before the latest change was made allowing the user to track down the trail more.

Open

Figure 2.1.2.4

2.1.3 Risk Email 

• Clicking on the email tab on the top horizontal navigation bar will allow the user to send an email regarding the selected risk to another staff in the organisation by entering their email address. The title of the email will be auto-populated along with the name of the Risk. Users can enter the email content and click Send to the email.

2.2 My Risk Actions

• My Risk Action widget will display the risk actions assigned to the logged-in user; the risk actions will be grouped by risks by default. 

Open

Figure 2.2.1

• To update details, it will be done as before, where Risk Action details can be updated inline, in the Risk Action record row itself, and click the Save button at the top of the page.

• To view more details, click the More Details button at the right corner of each record, which will open a popup window, displaying the Risk Action record to be updated or viewed. From here, you can update the details and click the Save button.

• A pop-up window displaying the Risk record details will be opened by clicking on the More Detailsbutton at the right corner of each record. The pop-up window will have two tabs namely; Risk Details

  • Risk Action Details

  • Email

2.2.1 Risk Action Details Tab

• The Risk Action Details is the tab shown by default within the pop-up window. The Risk Action Details tab will show the Risk Action fields that are configured to be shown in My Quick Update area (Access field configuration area via Main Menu > Risk Settings > Field Configuration > Action > Details > [Checked fields in ‘Visible in Actions Details’ column]). From here, you can update the details and click the Save button.

Open

Figure 2.2.1.1

2.2.2 Email Tab

• The Email tab will allow you to send an email regarding the selected risk action to another staff in the organisation or by entering an email address. The Title of the email will be auto populated with the name of the Risk Action. You can type the email message and click Send to send the email.

Open

Figure 2.2.2.1 

2.3 My Controls

• My Controls bubble will display the controls assigned to the logged-in user; the controls will be grouped by Next Review Date by default.

Open

Figure 2.3.1

• The number of records displayed by default in the control grid will be 10 records, and user can change the number of records displayed up to 150 records per page once the grid is loaded.

2.3.1 Control Details Tab

• To view more details of a control, click on the More Details button at the right corner of each record, which will open a popup window, displaying the Control record to be updated, following with three tabs; ‘Control Details”, “Documents” and “Links” tabs.

Open

Figure 2.3.1.1

• From here, you can update the details and click the Save button if you wish to save the information. 

• Click the Cancel button to cancel the changes you made to the record. 

• Click the Delete button to delete the control record.

• Click the History button to view the changes made to the record previously.

• The columns shown within the grid will be based on the configuration (Access field configuration area via Main Menu > Control Settings > Field Configuration > Details [Checked fields under ‘Quick Update’ column will reflect in the grid in Quick Update]).

2.3.2 Documents Tab

• Clicking on “Documents” will direct you to the Documents tab where you can click on Add New button to attach any document or a URL for a document specific to the selected control record and upon clicking on Save the respective Documents will be attached to that record and saved.

• The visibility of this tab within the more details page will be based on the configuration (Access field configuration area via Main Menu > Control Settings > Field Configuration > Documents [Show Tab should be switched ‘ON’ for visibility]).

Open

Figure 2.3.2.1

Open

Figure 2.3.2.2

2.3.3 Links Tab

• The Links tab will be, by default collapsed, and users are able to expand the sections by clicking on the downward arrow and view linkages related details.

Open

Figure 2.3.3.1

Open

Figure 2.3.3.2

• To add a new linkage, click on the Add New button and select the type of linkage required from the dropdown menu options (Hierarchy, Risk, Treatment, Obligation, Policy, Authority Document and Event) and select the relevant node/record and click on Save button.

• The visibility of this tab within the more details page will be based on the configuration (Access field configuration area via Main Menu > Control Settings > Field Configuration > Links [Show Tab should be switched ‘ON’ for visibility]).

2.3.4 Control Assessment Tab

• This tab reflects the linkages between a survey and a control. If a control is linked to a survey, that will reflect in the control assessment tab.

• The visibility of this tab within the more details page will be based on the configuration (Access field configuration area via Main Menu > Control Settings > Field Configuration > Control Assessment [Show Tab should be switched ‘ON’ for visibility]). 

Camms.Risk allowed only four main Risk Types to be used in our system. This feature will let you add multiple Risk Types in the system and further group these into identifiable categories if needed. Once these new Risk Types are added, it will provide more flexibility in identifying and managing your Risks within the product.

3.1 Configuring Risk Types in Risk Settings

3.1.1 Adding a Risk Type

• To add a Risk Type, under the ‘Risk Type’ tab, click the Add New button in the grid.

Open

Figure 3.1.1.1

• This will open an ‘Add New Risk Type’ popup window to add details and click the Add button.

Open

Figure 3.1.1.2

• Users are able to create a new risk type by specifying the below-mentioned details:

  • Risk Type Title

    • users can specify the name of the risk type.

  • Field Type Name and information icon.

    • Users must specify a name that will be considered as the database field name for the specific risk type.

  • Help Text

    • Users can enter a help text related to the risk type to be displayed across the application where needed. (Future)  

  • Description

    • Users can enter a brief definition of the risk type.

  • Hierarchy

    • Users can link risk types to one or more hierarchy nodes and any risks created from this risk type will be automatically linked to the selected hierarchy node(s).

    • This will be auto-selected at the point of Risk creation on the Risk Details page.  

  • Entity Type

    • Users can create risk types that are linked to entities (i.e. Projects and/or Actions) if required. Ex: Project Risk

  •  Confidentiality

    • Users can specify if they want to be able to create confidential risks of a particular risk type and which type of confidentiality to be considered.  

    • This is further explained under the ‘Risk Confidentiality’ section of the release note.

  • Status 

    • Users can change the status of the risk type via this toggle. A risk type has to be active (toggled ON) to be used throughout the application.

  • Visible in Add New

    • Toggling on will be considering the risk type to be shown in the Add New section on the LHS navigation menu and vice versa.    

• Each time you create a new Risk Type, it will create a standard Register for this Risk Type.

3.1.2 Editing a Risk Type

• To edit a Risk Type, under the ‘Risk Type’ tab, click the Edit button next to the Risk Type record you wish to edit.

• This will open an ‘Edit Risk Type’ popup window to update details and click the Save button.

Open

Figure 3.1.2.1

3.1.3 Deleting a Risk Type

• To delete a Risk Type, click the Delete button next to the Risk Type record you wish to delete.

• This will open a confirmation dialog box and let you confirm the deletion of the Risk Type.

• If any associations exist for a Risk Type, you will not be permitted to delete a Risk Type. The error message will display the list of Associations the Risk Type has.

3.1.4 Risk Type Grouping

• Risk Type Groupings will let you classify Risk Types into clusters, based on your requirement.

• You can group Risk Types under the Risk Type Grouping tab, by clicking the Add New button in the grid.

• This will open an ‘Add New Risk Type Group’ popup window to add details and click the Add button.

Open

Figure 3.1.4.1

3.1.5 Editing a Risk Type Grouping

• To edit a Risk Type Grouping, under the ‘Risk Type Grouping’ tab, click the Edit button next to the Risk Type Grouping record you wish to edit.

• This will open an ‘Edit Risk Type Group’ popup window to update details and click the Save button.

Open

Figure 3.1.5.1

3.1.6 Deleting a Risk Type Grouping

• To delete a Risk Type Grouping, click the Delete button next to the Risk Type record you wish to delete.

• This will open a confirmation dialog box and let you confirm the deletion of the Risk Type Grouping.

3.2 Newly created Risk Types in the left navigation panel

• Newly created Risk Types will be listed in the left navigation panel, grouped by a Risk Type Group (if it has been added to a group), under the + Add New menu.

• If a Risk Type has not been grouped, it will be listed to display on its own, and not under any group.

Open

Figure 3.2.1

3.3 Newly created Risk Types on the Risk Details page

• When creating a new Risk on the Risk Details page, the Risk Type field will not be editable.

Open

Figure 3.3.1

For every Risk Type you create, you will be able to customise the view of the Registers. In addition to the standard Registers (this will additionally include Registers that are created by default when a new Risk Type is created), now you will be able to create custom Registers with one or more Risk Types for better visualisation and management of Risks.

4.1 Configuring a Register

• To add a new custom Risk Register, click the Add New button at the top-right corner of the grid under the Register Configuration Settings page.

Open

Figure 4.1.1

• This will open a popup window to add the new Risk Register details. Once details are filled in, click the Add button.

  • The ‘Field Type Name’ will be the unique key that matches this Register with the database value.

  • Under the ‘Risk Types’ field you can add multiple Risk Types to display in this created Risk Register.

  • The ‘Status’ toggle will by default be enabled to display the Risk Register. You can disable and hide a custom Risk Register by turning this toggle to ‘OFF’.

Open

Figure 4.1.2

• For standard and custom Registers, you will be able to configure the Register columns and filters, show/hide the Register, and change the Sequence Order of the Register. To configure the fields of a standard or custom Register, click the Edit button, which will open an ‘Edit Risk Register Configuration’ window, where you can configure the following fields:

  • Register Name of the register.

  • The label of the field name will be displayed in the Register as the column title.

  • Risk Types to display in this Register.

  • Toggle to turn ON or OFF to display the field in the Register. Fields that cannot be hidden will be disabled.

  • Toggle to turn ON or OFF to display the field in the Register Filter page to be filtered and searched by.

  • By default, if not specified, the latest Register that is created will be displayed as the first tab.

  • Set the Sequence in which the columns will be displayed in the Register.

  • Set ‘Sort By’ and ‘Sort Order’ values to set a value to sort the Register by default and the sorting order (ascending or descending) when the Register is loaded. Previously, this will be available in the Register Filter as well, however, it will no longer be available in the Register Filter.

Open

Figure 4.1.3

4.2 Displaying the created Risk Register

• The Risk Registers will display in the order in which the Sequence is configured in the tab strip.

Open

Figure 4.2.1

4.3 Creating a Risk from a Register with multiple Risk Types

• Upon clicking the Add New button, first select the ‘Risk Type’ you want to create a Risk from. Once the Create button is clicked, you will be redirected to the relevant Risk Creation page.

Open

Figure 4.3.1

4.4 Displaying created Risk Types in the Register filter

• Newly created Risk Types will be listed in the Risk Register filter where applicable:

  • If a Risk Register is made up of one Risk Type, that Risk Type will be selected by default under the ‘Risk Type’ filter field and will be disabled.

  • If more than one Risk Type is added to a Risk Register, these Risk Types will be added to the Risk Type field, and you will be able to filter the Register based on the selection.

Open

Figure 4.4.1

The Field Configuration Setting has been updated to add several changes that will help in upgrading our Camms.Risk application.

5.1 Selecting Risk Types or a Risk Group to configure fields

• To configure fields of a Risk Type in its assessment pages, first, select the Risk Type or Risk Type grouping from the ‘Risk Type’ dropdown.

• All Risk Types and Risk Groups will be listed in this dropdown.

Open

Figure 5.1.1

• If a Risk Group is selected, it will list the Risk Types in tabs to configure fields.

Open

Figure 5.1.2

• If a Risk Type is selected, it will simply list the Risk Assessment tabs to configure its fields.

Open

Figure 5.1.3

5.2 Active field property handled via permissions

The Active field property listed in the Risk Assessment tab has now been removed and will be handled in Role Management under the Edit Active Status permission.

• Under Role Management, a new role called Edit Active Status will be introduced under the Risk Identification and Assessment (Inherent) role which will be used specifically to edit the Active status of a Risk Record. 

• The Edit permission will have to be given in addition to the ‘Edit Active Status’ for this to function as expected. 

• Giving only the Edit permission will not let you edit the Active status of a Risk.

5.3 Next Review Date field property handled via permissions

The Next review date field property listed in the Risk review tab (which was only available for static users) has now been removed and will be handled in Role Management under the Edit Next Review Date permission. 

• Under Role Management, a new permission called Edit Next Review Date will be introduced under the Risk Review section which will be used specifically to permit users to edit the next review date in the risk review tab.

• The Edit permission will have to be given in addition to the ‘Edit Next Review Date’ for this to function as expected. 

• Giving only the Edit permission will not let you edit the Next review date of a Risk.

5.4 Renaming Risk Assessment tabs

• You now have the flexibility to rename the Assessment tabs. To change the name, click on the Assessment tab you wish to change and under the ‘Object Name’ field, enter the new name you wish to change it to. A suggestive list of words will be listed when you edit the name, for you to select from too.

Open

Figure 5.4.1