EPC provides full Risk Management, Tracking, Scoring, and Analysis capabilities for processes. Users can create and assess Risks associated with processes, analyze their relationships to Controls, and ensure accurate residual risk evaluation.
Manual overrides allow users to adjust Residual Risk scores for processes when the system’s automatic calculation does not fully reflect real-world conditions.
This guide covers:
- When to use manual overrides on processes
- How to override residual risk scores
- Key risk terms relevant to processes
When Should You Use Manual Residual Risk Overrides for Processes?
Manual overrides are useful when the automated residual score does not reflect the true risk exposure of a process.
Common scenarios:
- Processes with unique or complex risks not captured by standard calculations
- Recent changes in process design, technology, or compliance requirements
- High-impact processes requiring expert judgment
- Audit or compliance-driven adjustments
Overriding Residual Risk Scores for Processes
By default, EPC calculates residual scores automatically. To manually adjust scores for a process:
- Navigate to the Details page of the desired process.
- Select Edit to open the process form.
- Expand the What is the Risk Analysis section.
- Select the Override automatic control roll-up checkbox.
- Enter custom values for:
- Residual Impact
- Residual Likelihood
- Residual Detectability
- Review the updated scores.
- Click Save to confirm your changes.
Understanding Key Risk Terms
| Term | What It Means |
|---|---|
| Gross Risk | The risk level if no controls or actions exist. |
| Residual Risk | The risk that remains after applying controls or corrective actions. |
| Impact | How severe the consequences are (e.g., cost, safety, operations). |
| Likelihood | How probable it is that the risk will occur. |
| Detectability | How likely the organization is to detect the risk before it causes harm. |
Need more help with this?
Visit the Support Portal