Accessing the IRM Manager Desktop
In HOPEX IRM,there are profiles associated to specific activities.
The menus and commands available depend on the profile with which you are connected.
Profiles used in IRM solutions
Risk Manager
The Risk Manager is responsible for executing the following tasks on risks within his/her responsibility domain:
• identifying risks
• carrying out direct assessments
• managing assessment campaigns
• defining action plans
• analyzing and following report creation
For more details, see Managing Risks.
Internal Control Director
The Internal Control Director:
• has all internal Controller rights
See Internal Controller.• validates campaigns
• prepares test plans
• validates action plans
For more details, see Managing Controls.
Incident and Loss Administrator
The Administrator has rights on all objects and workflows.
He prepares the working environment and creates elements required for management of incidents and losses.
He manages:
• users and assignment of profiles.
• the description of the environment: org-units and organizational processes, regulatory environment, IT resources.
He can intervene in:
• declared incidents
• action plans and actions
For more details, see Collecting Incidents (HOPEX LDC).
IRM Manager
The “IRM Manager” profile is available if you have access to more than one solution among:
• HOPEX Internal Control (IC),
• HOPEX Enterprise Risk Management (ERM)
• HOPEX LDC
• HOPEX Internal Audit
It groups the following profiles (if you have the relevant solutions):
• Risk Manager
• Internal Control Director
• Incident and Loss Administrator
• Audit director
Internal Controller
The internal controller:
• defines controls
• prepares assessment campaigns
• executes tests (creates work programs, creates issues and action plans)
• validates and follows up action plans
IRM functional administrator
The IRM functional administrator has the same rights as the IRM Manager. In addition, he is offered global administration features (such as user management).
The IRM functional administrator:
• has rights on all objects and workflows.
• prepares the working environment and creates elements required for risk and control management.
• manages:
• the description of the environment, including org-units and processes
• the regulatory environment
• IT resources
• users and assignment of profiles.
IRM Profiles/Solutions Summary
Solutions/ Profiles | ERM | IC | LDC |
IRM functional administrator | X | X | X |
IRM Manager | X | X | X |
IRM Contributor | X | X | X |
Risk Manager | X | ||
Internal Control Director | X | ||
Internal Controller | X | ||
Incident and Loss Administrator | X |