Skip to main content

Get help for ARIS Risk and Compliance

Create impact types

You can evaluate and assess a risk based on various impact types, for example, financial, environmental, or reputational impacts. You can define custom impact types for qualitative and/or quantitative assessments. As a system administrator in ARIS Risk and Compliance, you can create impact types for Risk Management. As an environment administrator, you can transfer system impact types created by the system administrator or create custom ones. The risk assessment is performed by the risk owner and checked by the risk reviewer.

Prerequisite

You have the Environment administrator role or System administrator privileges in ARIS Risk and Compliance.

Procedure. Procedure

  1. Open the Risk Management form on the system or the environment.

    1. Click ARIS Risk and Compliance Administration Administration. The General menu item is displayed initially.

    2. Click Basic settings under System management or click Environments under Environment management.

    3. If you selected Environments, click the name of the relevant environment.

    4. Click Risk Management. The form is displayed.

  2. Create system impact types as system administrator.

    1. If you selected Environments, but you do not want to use the system impact types for the environment, deactivate Include system impact types under Impact types available for risk assessment. Transfer of system impact types is activated by default.

    2. Click New Create in the Impact types/Environment impact types row. The Create impact type dialog opens.

  3. Transfer the system impact types or create custom impact types as environment administrator.

    1. Select whether to use a blank template or the copy of an existing impact type, then click OK. The Impact type form opens.

    2. Enter a name for the impact type.

    3. Specify whether quantitative or qualitative valuation criteria are displayed for risk assessments. If None is selected, both evaluation criteria remain available, enabling the risk owner to select the assessment type when assessing the risk.

    4. Specify whether the reduced damage values are required.

    5. Assign extents and frequencies for the qualitative risk appetite settings assessment (Create assignment/Assign) or create new ones (New).

    6. Specify the colors in which the impact type is displayed in the risk matrix (qualitative).

    7. To specify Detectability and/or Trend, enable the option Yes in the respective row.

    8. If you selected None or Quantitative for Predefined assessment type, specify whether the minimum and/or maximum damage values are displayed (Quantitative assessment settings).

    9. Edit the optional fields.

    10. Click Save Save.

The impact type is created.

If you change the impact type configuration after generating risk assessments, note the following: Configuration changes only apply to risk assessments generated in the future.

Next step: Generate risk assessments