HOPEX V5 EN

HOPEX IRM > HOPEX LDC > Collecting Incidents > Analyzing Incidents > Incident Qualitative Analysis

Incident Qualitative Analysis

To access incident qualitative analysis:

1. See Accessing incidents.

2. Open the properties of the incident.

3. In the Characteristics page expand the Qualitative Analysis section.

Risks and controls

To connect an incident to a risk and a control:

1. Click the arrow at the right of the Materialized Risk field and select Connect Risk.

2. Select the risk that interests you and click OK.

A risk is a hazard of greater or lesser probability to which an organization is exposed.

3. Click the arrow at the right of the Failed Control field and select Connect Control.

4. Select the control that interests you and click OK.

A control is a set of rules and means enabling the assurance that a legal, regulatory, internal or strategic requirement is respected.

Incident priority

To qualify the priority of an incident:

1. In the property page of an incident, select the Characteristics page and expand the Qualitative Analysis section.

2. Specify the Priority characterizing the incident relative importance.

• "High"

• "Medium"

• "Low"

Incident Impact

To specify the impact of an incident:

1. In the incident properties, select the Financial Analysis page.

2. Specify the Impact characterizing impact of the incident on environment elements.

• "Very High"

• "High"

• "Medium"

• "Low"

• "Very Low"

Risk factors

Many risk factors are defined within the framework of international, national or inter-professional regulations, or within the enterprise itself.

A risk factor is an element which contributes to the occurrence of a risk or which triggers a risk. Several Risks can originate from a same Risk Factor Examples: the use of a hazardous chemical product, the complexity of an application, the size of a project, the number of involved parties, the use of a new technology, the lack of quality assurance, the lack of rigor in requirements definition…

With each risk, you can associate one or more risk factors, sources of risks that have intrinsic potential to endanger organization operation. For example, dangerous chemical products, competitors, governments, etc.

To define risk factors associated with an incident:

1. In the property page of an incident, select the Characteristics page and expand the Qualitative Analysis section.

2. Select the Risk Factor tab and click the Connect button.

3. Select the risk factor associated with the incident.

4. Click OK.

Risk consequences

A risk consequence can be positive or negative. It is associated with a type, which enables its characterization, for example: image, environment, employees.

To define risk consequences associated with an incident:

1. In the property page of an incident, select the Characteristics page and expand the Qualitative Analysis section.

2. Select the Risk Consequence tab and click the Connect button.

3. Select the risk consequences associated with the incident.

4. Click OK.