Overview

This settings page lets you customise and configure fields displayed within the different risk types and its phases of assessments, risk controls, and risk actions. You can rearrange the order of fields, change label names of fields, add help text for fields, visibility and mandatory state of fields, display field in quick update page, click on some hyperlinked fields to add additional settings, and display risk review tab for a risk type.

In addition to the standard fields, the following fields can be customised and activated for Risk Assessment templates:

  • 10 multiline text fields [max characters 8,000]
  • 20 custom list fields
  • 5 tick boxes
  • 10 custom (single line) text fields
  • 5 custom date fields
  • 5 custom numeric fields

The following features are available in this section:

  • Rearrange fields according to the order you prefer it to be displayed, for each risk type's risk assessment phase, risk control, and risk action.
  • Specify a label name to be displayed for each field, for each risk type's risk assessment phase, risk control, and risk action.
  • Specify a help text to be displayed for each field.
  • Specify the visibility and if the field is mandatory for each of the risk assessment phases, risk control, and risk action.
  • Specify the visibility of the field under the 'My Quick Update' page.
  • Show/hide the 'Risk Review' tab across all pages for a risk type.



Rearrange Order of Fields

There are two methods how this can be done:

1. Dragging and dropping row

  • STEP 1: Access the risk type, risk control, or risk action tab by clicking on the main tabs.
  • STEP 2: If a risk type field is changed, access the risk assessment phase by clicking on the assessment phase sub tab.
  • STEP 3: Click and hold the field from the three horizontal dots in the right corner of the row, and drag and drop the field to the new position to be displayed.
  • STEP 4: Click on the save button, placed at the top left corner of the window.


2. From Ordering column

This method is easy to use if the field or fields are placed right at the bottom of the list. 

  • STEP 1: Access the risk type, risk control, or risk action tab by clicking on the main tabs.
  • STEP 2: If a risk type field is changed, access the risk assessment phase by clicking on the assessment phase sub tab.
  • STEP 3: Select the field by ticking the checkbox in the left corner below the Ordering column, and move it one up, one down, to the top, or to the bottom of the list to be displayed, using the top, up, down, bottom buttons placed at the top left corner of the window.
  • STEP 4: Click on the save button, placed at the top-left corner of the window.


Enter a Label Name for a Field

  • STEP 1: If a risk type field is changed, access the risk assessment phase by clicking on the assessment phase sub tab.
  • STEP 2: If a risk type field is changed, access the risk assessment phase by clicking on the assessment phase sub tab.
  • STEP 3: In the row next to the field, under the 'Label Name' column, enter the label you wish the field to display. You can have different labels for the different assessment phases.
  • STEP 4: Click on the 'Save' button, placed at the top-left corner of the window.


Add a Help Text to a Field

  • STEP 1: Access the risk type, risk control, or risk action tab by clicking on the main tabs.
  • STEP 2: If a risk type field is changed, access the risk assessment phase by clicking on the assessment phase sub tab.
  • STEP 3: In the row next to the field, under the 'Help Text' column, enter the help text you wish the field to display when hovered over it. You can have different help text for the different assessment phases.
  • STEP 4: Click on the 'Save' button, placed at the top left corner of the window.


Making a Field Visible and/or Mandatory

  • STEP 1: Access the risk type, risk control, or risk action tab by clicking on the main tabs.
  • STEP 2: If a risk type field is changed, access the risk assessment phase by clicking on the assessment phase sub tab.
  • STEP 3: In the row next to the field, under the column you wish to show/hide and/or make it mandatory, tick on the checkbox next to the 'Visible' value to make it visible and untick to hide the field. Likewise, tick the checkbox next to the 'Mandatory' field to make the field mandatory and untick to make it optional. You can change these settings for the different assessment phases.
  • STEP 4: Click on the 'Save' button, placed at the top-left corner of the window.

Note: Based on a Client's requirement, the checkboxes will be configured accordingly.

The following standard fields will be listed in the assessment tabs to be configured:

  • Risk Code
  • Risk Active Status
  • Risk Title
  • Responsibility Centre
  • Team
  • Risk Owner
  • Secondary Risk Owner
  • Primary Risk Category
  • Primary Risk Sub Categories
  • Secondary Risk Categories
  • Risk Identified
  • Risk Identifier
  • Legislation
  • Business Process
  • Organisation Hierarchy Links
  • Links
  • SWOT Type
  • Causes
  • Consequences
  • Risk Assessment
  • Risk Assessment
  • Risk Appetite Benchmark
  • Monte Carlo Analysis
  • Risk Treatment
  • Controls
  • Solutions


Making a Field visible in My Quick Updates

  • STEP 1: Access the risk type, risk control, or risk action tab by clicking on the main tabs.
  • STEP 2: If a risk type field is changed, access the risk assessment phase by clicking on the assessment phase sub tab.
  • STEP 3: In the row next to the field, under the 'Quick Update' column, tick/untick on the 'Visible' checkbox you wish to show/hide the field in the 'My Quick Update' page expand detailed view. You can change these settings for the different assessment phases.
  • STEP 4: Click on the 'Save' button, placed at the top left corner of the window.

Note: The My Quick Update configuration is governed by a pre-defined set of logic, based on the calculation of the risk rating in either of the three assessments. See the below table for the logic by which the data will be displayed in the expand view.


Hyperlinked Fields

  • STEP 1: Click on a hyperlinked field.
    The following hyperlinked fields will contain extra settings that could be enabled, assessment wise:
    • Risk Assessment – Show Risk Score: By ticking this checkbox, the Risk Score will be displayed in the Detail pages and the Register area.
    • Risk Appetite Rating – Show Appetite Score: By ticking this checkbox, the Appetite Score will be displayed in the Detail pages and the Register area.
    • Risk Treatment – Select Multiple Risk Treatments: By ticking this checkbox, you will be able to select multiple treatments.
    • Critical Path Delay Capture the critical path delays for each project risk, and display a total aggregate delay for each project within the register view.
    • Primary Risk Sub Categories
      • Select only one Risk Sub Category: By ticking this checkbox, configure the Primary Risk Sub Categories field as only a single select field within the Initial/Inherent Assessment page for all risk types.
    • Secondary Risk Categories
      • Show Secondary Sub Risk Categories: By ticking this checkbox, it will display only secondary categories in the 'Sub Categories and Secondary Categories' dropdown in the risk assessment creation page (Strategic and Project risk types).
  • STEP 2: Click on the checkbox to enable the setting.
  • STEP 3: Click 'Save' at the bottom of the popup window.


Critical Path Delays for Project Risks

This Field Configuration under Project Risk, will capture the critical path delays for each project risk, and display a total aggregate delay for each project within the register view.

  • Tick the Visible checkbox of this field in the respective assessment tabs, and click on the hyperlinked field to configure the unit for the Critical Path Delay.
  • Based on the selection, the below details will be displayed:
    • Day – A numeric textbox to enter a two decimal day value.
    • Month – Two numeric textboxes named Month and Days.
      Note: If a value of over 30 is given under the days textbox, it will be converted to months and the remainder will be displayed as days (e.g. if days is 45 then the system will count it as 1 month and 15 days).
  • Once configured, Critical Path Delay details will be listed in the Project Risk Register columns. Along with the option to view assessment wise aggregated values for each project. 
     

Risk Review Tab

Click on risk type main tab and click on the 'Risk Review' subtab to access its fields.

Hiding the Risk Review tab in the workflow

You can hide the entire Review tab along with its fields across all windows by clicking on the 'Show Tab' toggle  switch.

  • The OFF toggle switch will hide the Risk Review tab and its fields for configuration.
  • The ON toggle switch will show the Risk Review tab and its fields as before, to perform field configurations.

  • Based on the 'Show Tab' configuration, the following risk review fields will be hidden from settings available for a user with Administration/Risk Settings permission:
    • Camms.Risk > Framework > Risk Settings > Register Configuration
    • Camms.Risk > Administration > Risk Administration > Email/Email Templates
    • Camms.Risk > Dashboard > Dashboard Configurations > Widget Settings > Risks by Overdue Status Settings
  • Based on the 'Show Tab' configuration, the following risk review fields will be hidden from these sections:
    • Camms.Risk > Workspace > Risk Analysis > Heatmap Dashboard
    • Camms.Risk > Workspace > Executive Intelligence
    • Camms.Risk > Workspace > My Quick Update
    • Camms.Risk > Workspace > Dashboard
    • Camms.Risk > Risk Management > Risk History
    • Risk Register > [risk record] > [risk history icon] > Risk Audit Trail


Risk Controls Tab

Click on the Risk Controls main tab to set the ‘Mandatory’ state of all fields under Risk Controls separately, in the Control Detail page, Control Risk Detail, and Risk Grid.

The configurations in the risk controls section will behave as below:

SettingFunction
Unique for Risk Enable the field to be unique for the risk with which the control is linked to. This would mean that even though the control is commonly managed, fields marked as unique per risk will be maintained per risk. For example, if the 'Control Effectiveness Rating' was marked as 'Unique' for the risk, the field value will be maintained different within each risk as opposed to if its not marked as unique, it will be a common value across all risks with which its linked to.
Note: This setting will be visible once an internal setting 'Enable Functionality To Manage Risk Controls Commonly' is enabled via Camms Support. Once this internal setting is enabled, you can configure this column.
Control Detail Enable the field to be visible and/or mandatory in the Control Details area accessed by clicking on the control title hyperlink through the Control Register.
Control Risk Detail Enable the field to be visible and/or mandatory in the Control Details area accessed by clicking on the control title hyperlink through the Risk with which its linked to.
Risk Grid
Enable the field to be visible and/or mandatory in the control grid table within a risk assessment.
Quick UpdateEnable the field to be visible in the My Quick Update page.


Note: The 'Visible' state of the control register and 'Searchable' state in the register, will be available to be configured under 'Register Configuration' area under Risk Settings.


Field NameField Type
Control TypeDropdown
Note: List items can be included from the ‘custom lists’ area.
Control TitleText field
Note: This field is ticked and disabled, and is a mandatory field in all the above areas.

Control Owner

Staff dropdown
Control Owner RatingDropdown
Note: Rating configured from Rating Type > Risk Control screen.
Control AuthoriserStaff dropdown
Control Authoriser RatingDropdown
Note: Rating configured from Rating Type > Risk Control screen.
Control Solution GridStandard Solution Grid
Note: Visibility can be configured in control detail and quick update

Control Review Date

Date field

Control Next Review DateDate field

Control Comment

Multiline text field
Control Authoriser CommentMultiline text field
Control DirectorateDirectorate dropdown
Control Business UnitBusiness Unit dropdown
Control Service ProfileControl Service Profile dropdown
Causes and ConsequencesCauses and Consequences

10 Custom text fields

Single line text
10 Custom text fieldsMultiline text
20 Custom list fieldsSingle select list
5 Date fieldsDate fields
5 Numeric fieldsNumber fields
  • The field ordering is defaulted to the ‘Details’ screen. Control grid in risk detail assessment and control register will follow the same order as in the control detail screen (based on the field visibility).
  • The Label Names and Help Text content can be configured using this screen and applied to all areas of the control feature. See titles Enter a Label Name for a Field and Add a Help Text to a Field in this article for details on how to configure these.
  • To rearrange the order of fields, see title Rearrange Order of Fields in this article for details on how to perform this.

The below additional configurations will be available under this section:

  • Controls: Enables the Risk control grid within the assessments. 
  • Risk treatment: Enables the Risk treatments grid within the assessments. 
  • Solutions: Enables the Risk actions grid within the assessments. 
  • Monte Carlo Analysis: Enables the Monte Carlo Analysis within the assessments.

Additional properties of the Monte Carlo Analysis and related fields can be accessed by clicking on the hyperlinked field name:

Field

Description

Best Case Scenario ($)


Used to capture the best case scenario of any financial impact linked with the risk.
A label reference and a description can be added from this area to guide the end users on the intended input within the risk.

Most Likely Scenario ($)

Used to capture the most likely scenario of any financial impact linked with the risk.
A label reference and a description can be added from this area to guide the end users on the intended input within the risk.

Worst Case Scenario ($)

Used to capture the worst case scenario of any financial impact linked with the risk.
A label reference and a description can be added from this area to guide the end users on the intended input within the risk.
Show Quantitative Range AssumptionsUsed to show the quantitative range assumption values for the risk. This is a text field where the end user can input details on the assumptions made for entering the figures for best/most likely and worst case scenarios. 
A tick box configuration to allow the text fields to show within the assessment. Three text input areas under each scenario option is available and can be shown/hidden based on your preference for the assessment.
Likelihood (%)Used to capture the likelihood percentage for the above best/most likely and worst case scenario predictions. 
This is a numeric data field which will allow the end users to enter a likelihood value between 0-100 as a percentage.

See article Risk Assessment under title 'Quantitative Risk Analysis (Monte Carlo Analysis)' for more details on the Monte Carlo Analysis.

Control Directorate, Control Business Unit, Control Risk Register fields

Directorate, Business Unit, Service Profile fields are optional, where admin has the ability to configure. When there are more than one activated check the following:

  • When higher level is in ‘please select’ then lower level field will be populated with all fields (please select to be default). E.g. when Directorate and Business Unit is activated. When Directorate field is in ‘please select’ then Business Unit field will populate all Business Units with ‘please select as default).
  • When a node is selected in higher level, then lower level content will be filtered based on that selection. E.g. when a Directorate is selected, the only the Business Units attached to that Directorate will be displayed for BU field (where please select as default).


Risk Control Documents
The documents tab in the controls details area can be enabled for controls by clicking on the 'Show Tab' ON/OFF toggle button configuration from this section. This will enable a documents tab within the control details area through which documents and URLs can be added for controls.

Note: When the risk controls are opted to be managed commonly, an option to configure documents to be either managed unique per the linked risk or the control as commonly shared documents is also available. This is enabled via the 'Is unique for risk' configuration under the tab.


Risk Control Linkages

The Links tab in the controls details area can be enabled by clicking on the 'Show Tab' ON/OFF toggle button  configuration from this section. This will enable a Links tab within the control details area through which linkages can be added for controls.

Note: When the risk controls are opted to be managed commonly, an option to configure links to be either managed unique per the linked risk or the control as commonly shared linkages is also available. This is enabled via the 'Is unique for risk' configuration under the tab.


Risk Actions Tab

Click on the Risk Actions main tab to configure the visibility of the Risk Action grid, Risk Action details page, My Quick Update grid, and My Quick Update details page, and configure the fields as mandatory or not.

Note: Users with the ‘Administrator’ permission in static hierarchy (accessed via Administration > Manage Users) or ‘Risk Setting’ permission in flex hierarchy (accessed via Administration > Role Management) will be able to configure the risk action fields.

This page will have a two-tab view labelled as ‘Details’ and ‘Links’.

Details

  • The details page will list and let you configure all of the existing standard fields which are as follows: 
  • Action Title [max characters 500] 
  • Resource Requirement 
  • Responsible Officer
  • Department
    Note: For static hierarchy this will be the ‘Business unit’ dropdown and for flex hierarchy it will be the ‘add/edit links’ button where the user can link to any hierarchy node in the organisation.
  • Start Date 
  • End Date  
  • Reporting Frequency  
  • Completed Date  
  • Control Title [max characters 1,000] 
  • Next Update Required 
  • Links 
  • Linked Risks
  • Action Status 
  • Percent Complete 
  • Progress Comment [max characters 8,000] 
  • Next Update Required 
  • Last updated by 
  • Time stamp 
  • The following set of custom fields will be available:
  • Multiline Custom text fields 1-10 [max characters 8,000]
  • Custom Single select list fields 1-10
  • Custom Tick boxes 1-05
  • Single line Custom Text fields 1-10
  • Custom Numeric fields 1-10
  • Label Name – The field name can be changed as per client preference by providing a displayed label name in this column.
  • Help Text – Help text for each field can be configured under this column. 
  • Ordering & 3 horizontal dots – The field sequence can be changed easily by dragging and dropping the field by selecting the field from the three dots in the right side corner. Additionally, the order can be configured by selecting the field by ticking the ‘Ordering’ checkbox and clicking the Up or Down arrows keys in the top right corner of the page. 
  • Visible in Risk Action Detail – The standard/custom fields checked here will display as fields in the Risk Action Detail page of an action within a Risk.
    • The standard fields ‘Action title’ will be ticked and disabled.
    • The standard fields ‘Responsible officer, Start Date, End date, Percentage complete and Action Status’ will also be ticked and disabled by default in this column.
  • Visible in Risk Action Grid The standard/custom fields checked here will display as columns in the Risk Action Grid within a Risk.
    • The standard fields ‘Action title’ will be ticked and disabled. 
    • The standard fields ‘Responsible officer, Start Date, End date, Percentage complete and Action Status’ will also be ticked and disabled by default in this column.
  • Visible in Actions Grid in Quick Update  The standard/custom fields checked here will display as columns under ‘My Risk Actions’ in My Quick Update.
  • The standard field ‘Action title’ will be ticked and disabled by default.
  • The standard fields ‘Additional Risk Controls, Linked Risks, Control Title, Last Updated By, and Time Stamp’ will be unticked and disabled by default in this column.
  • Visible in Actions Detail in Quick Update The standard/custom fields checked here will display as rows when an action is expanded in ‘My Risk Actions’ in My Quick Update.
  • The standard field ‘Action title’ will be ticked and disabled by default.
  • The standard fields ‘Control Title and Links’ will be unticked and disabled by default in this column.
  • Mandatory The fields which are ticked under the ‘Mandatory’ column will be mandatory throughout the four areas mentioned above.
  • The standard fields ‘Action title’ will be mandatory at all times.
  • The standard fields ‘Responsible officer, Start Date, End date, Percentage complete, and Action Status’ will also be ticked and disabled by default in this column.
  • The standard fields ‘Performance, Linked Risks, Links, Time stamp, and Last updated by’ will be unticked and disabled by default.

Links

  • The visibility of the ‘Links’ Tab within the Action details page can be configured by ticking the ‘Show Links’ checkbox within this tab for a risk action. This tab enables you to create a linkage between a risk action and an audit action.
    Note: This checkbox will be unticked and disabled if Camms.Risk Audit has not been activated.


Displaying Performance Indicators for Risk Treatment Actions

Performance indicators will indicate if an action is 'On track', 'Off Track' or 'Monitor' status. Additionally, this will be available in the Risk Management – Risk Registers to show a summary of how risk actions are performing for each risk.

To configure the performance indicators to be displayed:

  • STEP 1: In the Details tab under the 'Performance' risk action field, you may set it up to be displayed in the relevant pages.
    • Visible in Risk Action Details – Ticked by default. This will show the performance indicator in the details page accessed by clicking on the action title via the action grid in risk assessments.
    • Visible in Risk Action Grid – Unticked by default. This will show the performance indicator in the action grid in risk assessments.
    • Visible in Action Grid in Quick Update – Unticked by default. This will show the performance indicator in the action grid in Quick Update under the My Risk Actions section.
    • Visible in Action Details in Quick Update – Ticked by default. This will show the performance indicator in the action grid’s expand in Quick Update under the My Risk Actions section. 
    • Mandatory – Unticked and disabled since this field displays as a label.
  • STEP 2: Configure the 'Performance Threshold' values via Administration > Configuration > Action Progress Threshold, to determine the thresholds for each performance category for the risk action. By default, the below values will be set, which can be changed if required.
  • On Track: >= 90
  • Off Track: < 70
  • Monitor: Less than 90 and greater than or equal to 70
  • STEP 3: Configure the summary count of how all the linked risk actions are performing for each risk within the Risk Registers via the Register Configuration page, using the 'Linked Risk Action Count' field via Framework > Risk Settings > Register Configuration.
  • Visible – Unticked by default. When ticked, this will appear as a column in the register, showing a summary count by performance category for all risk actions that are linked with that risk.
  • Searchable – Unticked by default. When ticked, this will appear as a filter in the register as a multi select dropdown.
  • Sequence – This will define the order in which the field should appear in the register as a column and as a filter. By default, this will be given the last position.
  • Width – This will define the width of the column if enabled to be shown in the register. This will have the default width of 0.
  • Label Reference – The name of the column can be configured here. The Default column name will be ‘Risk Action Summary’. This column will be displayed in the Risk Management - Risk Registers under the specified column name here.

  • STEP 4: The performance of a risk action will be denoted by one of the four colour coded performance categories: ‘On Track’, ‘Off Track’, ‘Monitor’ and ‘Not Applicable’. This will display within the Risk Action grid, Risk Action Details page, My Quick Update grid and My Quick Update Details page, based on the field configuration as in STEP 1.
    See article Risk Actions under section 'Risk Action Performance Indicators' for more details on this.

Notes:

  • If in case the progress synchronisation setting between Camms.Strategy actions and risk actions are turned on, plus once a risk action is converted to a Camms.Strategy action, the action progress will be calculated based on the targets set from Camms.Strategy end and will no longer consider the default target calculation from the above calculations. 
  • The history of the page will be updated only when you click ‘Save’ when in edit mode.
  • In the event the Action/Recommendation setting is turned on, then it will consider the % complete of the recommendation.