Incident Qualitative Analysis
To access incident qualitative analysis:
1. Open the properties of the incident.
2. In the Characteristics tab, expand the Qualitative Analysis section.
Risks and controls
Associating an incident to a risk and to a control is an essential step in managing incidents.
A risk is a hazard of greater or lesser probability to which an organization is exposed.A control is a set of rules and means enabling the assurance that a legal, regulatory, internal or strategic requirement is met.To do this:
1. Open the properties of an incident, Characteristics tab, section Qualitative Analysis.
2. Click the arrow at the right of the Risk field and select Link Risks.
The list of risks defined in your repository appears.
3. Select the risk that interests you and click OK.
The incident is now attached to the risk.
4. Specify the Impact characterizing impact of the incident on environment elements.
• "Very High"
• "High"
• "Medium"
• "Low"
• "Very Low"
5. Specify the Priority characterizing the incident relative importance.
• "High"
• "Medium"
• "Low"
6. Click the arrow at the right of the Control field and select Link Controls.
The list of controls defined in your repository appears.
7. Select the control that interests you and click OK.
The incident is now attached to the control.
Risk factors
Many risk factors are defined within the framework of international, national or inter-professional regulations, or within the enterprise itself.
A risk factor is an element which contributes to the occurrence of a risk or which triggers a risk. Several risks can originate from the same risk factor. Examples: the use of a hazardous chemical product, the complexity of an application, the size of a project, the number of involved parties, the use of a new technology, the lack of quality assurance, the lack of rigor in requirement definition, etc.With each risk, you can associate one or more risk factors, sources of risks that have intrinsic potential to endanger organization operation. For example, dangerous chemical products, competitors, governments, etc.
To define risk factors associated with an incident:
1. Open the properties of an incident, Characteristics tab, section Qualitative Analysis.
2. Select the Risk Factor tab and click the Connect button.
The list of risk factors defined in your repository opens.
3. Select the risk factor associated with the incident.
4. Click OK.
The risk factor appears in the list.
Risk consequences
A risk consequence can be positive or negative. It is associated with a type, which enables its characterization, for example: image, environment, employees.To define risk consequences associated with an incident:
1. Open the properties of an incident, Characteristics tab, section Qualitative Analysis.
2. Select the Risk Consequence tab and click the Connect button.
The list of risk consequences defined in your repository opens.
3. Select the risk consequences associated with the incident.
4. Click OK.
The risk consequence appears in the list.