8.1.1. Assessment Focus Areas

Users must choose a focus area for the risk assessment, specifying what it will investigate and evaluate. Upon selecting a focus area, relevant fields specific to that selection will be appear in the form.

1. Asset
2. Department
3. Project
4. Product
5. Risk
6. Service
7. Supplier
8. Other

*For guidance on common form functions, please refer to the dedicated section in the manual.

1. Asset

This option focuses the assessment on risks associated with a specific asset, considering factors like maintenance, security, and regulatory compliance.

*An asset is a tangible or intangible entity that serves a function or is used by a resource to fulfill a function. It is essential for supporting an organization’s operations or achieving its objectives. Examples include equipment, property, or technology.

If this option is chosen, the following fields become visible:

• Select an Asset Folder: This is a single-select dropdown field that retrieves the list of asset folders from EPC. Instead of a dropdown menu, the list appears in a pop-up window.
  

  **In this window, users navigate through a tree structure displaying object sets and nested folders. To select a folder, simply double-click on it.

  • Once an asset folder is chosen, its child objects will populate the grid below.
    
    !

    In this grid, users can select a specific object for assignment by checking the corresponding Selected checkbox.

    • Selections can be saved by clicking the Save Changes button or by clicking outside the grid. To discard selections, click Discard Changes.
• Assign Selected: This button allows users to assign the selected child object for assessment.
  • Upon clicking this button, two grids will appear: the first displaying the asset selected for assessment, and the second displaying the objects impacted by the assigned asset.
    
    !

    Only one asset can be assigned at a time to the risk assessment. To assign a different asset, users must first delete the current one by clicking the Delete ( ) button in the Asset to Be Assessed grid.

    • To confirm the deletion of an object in the grid, click the Save Changes button or simply click outside the grid. To undo deletion, click either Discard Changes or Undo ( ).

2. Department

This option focuses the assessment on risks within a particular department, identifying issues that could impact departmental operations and objectives.

If this option is chosen, the following field becomes visible:

• Department: This is a single-select dropdown field that retrieves the list of active departments in the system. It allows users to specify the department to be assessed for risks.
  

  **Departments are created and managed in the Departments tab of the Organization Management (Admin) application.

3. Project

This option focuses the assessment on risks related to a specific project, evaluating aspects like timelines, resource allocation, and deliverables.

If this option is chosen, the following field becomes visible:

• Project: This is a single-select dropdown field that retrieves the list of active projects in the system. It allows users to specify the project to be assessed for risks.
  

  **Projects are created and managed in the Project List section of Risk Settings.

4. Product

This option focuses the assessment on risks associated with a specific product, encompassing its development, production, and market performance.

If this option is chosen, the following fields become visible:

• Product: This is a single-select dropdown field that retrieves the list of registered products in the system. It allows users to select the product to be assessed for risks.
  • When a product is selected, the following fields are automatically populated with the relevant details:
    
    • Identifier: This field displays the unique identifier assigned to the selected product.
    • Device Class: This field displays the class or category to which the selected product belongs.
    • Status: This field displays the current status of the selected product.
    • Version: This field displays the version number or iteration of the selected product.
      

      **Products and their details are managed in the Product(s) / Equipment application.

5. Risk

This option focuses the assessment on a specific risk, evaluating its impact and relevance either within a chosen context or across different areas of the organization.

If this option is chosen, the following fields become visible:

• Select an Risk Folder: This is a single-select dropdown field that retrieves the list of risk folders from EPC. Instead of a dropdown menu, the list appears in a pop-up window.
  

  **In this window, users navigate through a tree structure displaying object sets and nested folders. To select a folder, simply double-click on it.

  • Once a risk folder is chosen, its child objects will populate the grid below.
    
    !

    In this grid, users can select a specific object for assignment by checking the corresponding Selected checkbox.

    • Selections can be saved by clicking the Save Changes button or by clicking outside the grid. To discard selections, click Discard Changes.
• Assign Selected: This button allows users to assign the selected child object for assessment.
  • Upon clicking this button, two grids will appear: the first displaying the risk selected for assessment, and the second displaying the objects impacted by the assigned risk.
    

    **To access the full object description, click inside the Description column.

    !

    Only one risk can be assigned at a time to the risk assessment. To assign a different risk, users must first delete the current one by clicking the Delete ( ) button in the Risk to Be Assessed grid.

    • To confirm the deletion of an object in the grid, click the Save Changes button or simply click outside the grid. To undo deletion, click either Discard Changes or Undo ( ).

6. Service

This option focuses the assessment on risks related to the organization’s capabilities, identifying vulnerabilities that could impact operational efficiency.

*A business capability refers to the integrated set of resources, processes, and skills that enable an organization to perform key functions or achieve specific goals.

If this option is chosen, the following fields become visible:

• Select a Capability Folder: This is a single-select dropdown field that retrieves the list of capability folders from EPC. Instead of a dropdown menu, the list appears in a pop-up window.
  

  **In this window, users navigate through a tree structure displaying object sets and nested folders. To select a folder, simply double-click on it.

  • Once a capability folder is chosen, its child objects will populate the grid below.
    
    !

    In this grid, users can select a specific object for assignment by checking the corresponding Selected checkbox.

    • Selections can be saved by clicking the Save Changes button or by clicking outside the grid. To discard selections, click Discard Changes.
• Assign Selected: This button allows users to assign the selected child object for assessment.
  • Upon clicking this button, two grids will appear: the first displaying the capability selected for assessment, and the second displaying the objects impacted by the assigned capability.
    

    **To access the full object description, click inside the Description column. To view the object in EPC, click the hyperlink in the Link to Capability column.

    !

    Only one capability can be assigned at a time to the risk assessment. To assign a different capability, users must first delete the current one by clicking the Delete ( ) button in the Capability to Be Assessed grid.

    • To confirm the deletion of an object in the grid, click the Save Changes button or simply click outside the grid. To undo deletion, click either Discard Changes or Undo ( ).

7. Supplier

This option focuses the assessment on risks associated with a specific supplier, examining factors such as reliability, quality, and supply chain stability.

If this option is chosen, the following fields become visible:

• Supplier: This is a single-select dropdown field that retrieves the list of registered suppliers in the system. It allows users to select the supplier to be assessed for risks.
  • When a supplier is selected, the following fields are automatically populated with the relevant details:
    
    • Representative Name: This field displays the name of the representative associated with the selected supplier.
    • Representative Email: This field displays the email address of the supplier’s representative.
      

      **Suppliers and their details are managed in the Supplier application.

8. Other

This option focuses the assessment on risks in an area not covered by the predefined options.

If chosen, the following field becomes visible:

• Other: This is a text field that allows users to specify the custom risk category they wish to assess.