Managing Process Categories and Processes
Two process levels are available:
• process category
• process
Accessing processes
To access the process category / process tree:
In the navigation bar, select Processes.The processes and process categories appear.
Process hierarchy
The hierarchy of processes/operations is as follows:
Process category > Process > Operation
For each process of the hierarchy the following is displayed:
• Risks (directly connected to processes)
• Controls (directly connected to risks, which are in turn connected to processes)
• Controls (directly connected to processes)
The following columns are available:
• Risks (number of)
• Controls (number of)
• Last assessment
• Residual risk
• Forecast risk
• Latest compliance rate
• Control level
Specifying process characteristics
To access process or process category properties:
Open the Characteristics page of its properties.The Owner is the person who has created the process. The Owner is responsible for global operation of the process in terms of effectiveness, profitability and security.
The Responsible user is in charge of planned actions (RACI).
Specifying process scope
A process / process category can be linked to different objects types.
A specific page for each object type is available in properties:
• Risks: risks that relate to the process.
For more information, see Managing Risks.• Controls: controls that relate to the process.
For more information, see Managing Controls.• Incidents
For more information, see Collecting Incidents.• Action plans
For more information, see Managing Action Plans.To view regulations impacting a process, expand the Regulatory Impact section. For more information, see Managing the Regulatory Environment.Specifying responsibilities
Responsibilities on a process are shared by persons with different roles.
To specify responsibilities on a process:
In the process properties, expand the Responsibilities section.You can specify the following responsibilities:
• Accountable
• Consulted
• Informed
The above responsibilities correspond to the RACI responsibilities. See Responsibilities (RACI).The process Accountable is to be specified in the Characteristics.• Risk assessor
You can define several risk assessors on the same entity.• Control assessor
You can define several Control assessors on the same entity.Specifying sub-processes
To specify the sub-categories of a process category:
In the process category properties, expand the Sub-processes section.You can specify:
• The process category components
• The connected organizational processes
To specify the sub-processes of a process:
In the process properties, expand the Sub-processes and Operations section.You can specify:
• sub-processes
• associated operations
Managing business continuity
These features are available with HOPEX BCM only.To access the Business Impact Analyses (BIAs) and Business Continuity Plans (BCPs) associated to a process/process category:
Open process or process category properties and select the Business Continuity page.For more details, see:To add a process category to a BCM system:
In a process category pop-up menu, select Add to BCM system.For more information, see Managing BCM Systems.To create a Business Impact Analysis (BIA) from a process category:
Right-click the process category and select Create a BIA.Other sections of a process
The properties page of a process presents the following sections:
• IT assets: It resources (applications, databases and servers) are made available for process implementation.
• Entities that intervene in the process.
See Managing Entities.• Business Lines: business lines that use the process services.