8.2.3.1. Risk Analysis

In the Risk Analysis form, users can document and evaluate an identified risk.

*For guidance on common form functions, please refer to the dedicated section in the manual.

1. Risk Name: This is a text field that allows users to modify the name of the identified risk.
2. Risk Type: This is a single-select dropdown field that retrieves the list of risk types from EPC. It allows users to specify the nature of the identified risk.
3. Risk Matrix: This is a single-select dropdown field that retrieves the list of risk matrices from EPC. It allows users to select the risk matrix that best aligns with their assessment criteria.
   

   **Upon selection, the options inside the Impact, Probability, and Detectability dropdowns are automatically updated to reflect the parameters of the chosen risk matrix.

4. Description of the Risk: This is a rich text field that allows users to provide a description of the identified risk.
5. Cause(s) and Effect(s): This grid allows users to document the causes and effects associated with the identified risk.
   • Add: This button allows users to add a new row to the grid, revealing the following input fields
     
     • Cause: This is a text field that allows users to specify the cause contributing to the identified risk.
     • Effect: This is a text field that allows users to describe the potential effect or consequence resulting from the identified risk.
   • Discard Changes: This button allows users to discard their changes.
   • Save Changes: This button allows users to save their changes.
6. Impact: This is a single-select dropdown field that retrieves the list of impact levels from EPC, based on the selected risk matrix. It allows users to specify the impact or severity of the identified risk.
7. Probability: This is a single-select dropdown field that retrieves the list of probability levels from EPC, based on the selected risk matrix. It allows users to specify the probability or likelihood of the identified risk occurring.
8. Detectability: This is a single-select dropdown field that retrieves the list of detectability levels from EPC, based on the selected risk matrix. It allows users to specify the degree to which the risk can be detected.
9. Score: This field automatically calculates a risk score based on the selected impact, probability, and detectability values.
   • For more information on how the score is calculated, click here.
     

     **Upon saving the form, the calculated score automatically populates the corresponding row in the grid within the Risk Identification & Evaluation accordion.
     
     

10. Select the folder where this risk will be added: This is a single-select dropdown field that retrieves the list of risk folders from EPC. It allows users to choose the folder in EPC where the identified risk will be added or stored.
    • Rather than a dropdown menu, this field opens a pop-up window.
      

      **In this window, users navigate through a tree structure displaying object sets and nested folders. To select a folder, simply double-click on it.

    • Once a folder is selected, its name will populate the Folder Name field.
      
11. Identifier: This is a text field that allows users to input a unique identifier for the risk in EPC.
12. Save and Previous: This button allows users to save their changes and navigate to the previous item in the grid.
13. Save and Return: This button allows users to save their changes and return to the Execute Risk Assessment form.
14. Save and Next: This button allows users to save their changes and navigate to the next item in the grid.