Accessing Controls
You can access controls through lists and trees which allow classification of controls according to different criteria.
By default, controls are visible to all. However, you can modify only those controls attached to your reference entity or to one of its sub-entities.
A user is connected to a reference entity in the framework of his/her assignment. For more details on assignments, see chapter "Managing Users" in the HOPEX Power Supervisor guide.If according to your assignment you are connected to the "France" entity, you cannot modify controls that have "World" entity context.
However, if you are connected to the "World" entity, you can modify controls that have "France" entity context.
Listing Controls
To list all controls:
In the HOPEX IRM desktop, select Registers > Controls > All Controls.For each control, you can access the following information:
• Code
• Key control (is it a key control or not?)
• Associated business or organizational Processes (connected directly or via a risk connected to a the control)
• Last Assessment (date)
• Issues (number of)
• Nature
• Execution mode
• Execution frequency
You may use these columns to sort controls according to different criteria, or add other columns. Accessing Orphan Controls
To access controls that mitigate no risks and are not connected to any element of the organization:
In the HOPEX IRM desktop, select Registers > Controls > Orphan Controls.To define a control in a proper way:
Connect it to a risk and make sure you have defined the risk scope.Accessing Controls by Incidents
To access controls that mitigate risks materialized by one or several incidents:
In the HOPEX IRM desktop, select Registers > Controls > Controls by Incidents.A risk is considered as materialized when it is connected to an incident that is in a status other than Draft or Rejected.