What are Causes?
Causes are underlying uncertainties that could lead to the risk materialising. There are also referred to as “Risk Drivers” or “Risk Factors“.
Causes are a great way to increase the granularity of a risk without having to create separate risks. Controls can assigned to each Cause and the effectiveness of the controls environment is used to highlight areas of concern for management when they are updating their risk assessments.
Example: Adding granularity to a high level risk of “breach of regulatory duties” through causes.
How to manage Causes?
For a given Risk, Causes can be
managed in the Risk Cards page.
Find the “Basic Informations” card on the risk cards page for the risk you would like to add causes to.
At the bottom right of that card there is a “+ Cause” button that can be used to add and manage causes for that Risk.
On pressing the “+ Cause” button a pop-up appears with three tabs: Add New, Edit Cause and Select.
SELECT: This tab provides an option to manage the causes that are mapped to the current risk. Use the combo-select box to assign the causes from the existing library by moving the cause from the left box to the right box.
EDIT CAUSE: In the Edit Cause tab, search and select the cause you want to edit. Once selected, scroll down and update the Cause title, related entities, teams and assigned controls. Note that multiple entities and teams can be assigned to a cause. Don’t forget to click UPDATE to save your changes.
ADD NEW: In the Add New tab, simple define the Cause title and assign entity(ies), team(s) and controls. Note that multiple entities and teams can be assigned to a cause. Don’t forget to click ADD CAUSE to save your changes.
Adding New Causes
Once a new cause is added, the pop-up will automatically move to the Select tab, showing the new cause in the “Assigned Causes” box.
To close the pop-up, simply click anywhere outside the pop-up or click “Exit“.
Remember to save your changes by clicking on the green buttons o “Save” – when updating selection. o “Update” – when editing causes. o “Add New” – when adding causes.