[Music] the risk assessment feature gives you the ability to create risk assessments of your sites travel destinations and even individuals depending on which user role you have the things you can see and do in the risk assessment function will vary if you are an employee you will only be able to view and update things within the risk assessment if given access to it if you are a manager you can read create and update the risk assessment if you are a member of the division the risk assessment is within lastly if you are an administrator you can read update and create risk assessments in all divisions when you click on the risk assessments feature you will see a map the map shows an overview of all the risk assessments you have access to the icons on the map portray the different asset types below you can see a list of all the risk assessments as well the filter button gives the option of filtering according to different categories such as title owner name site categories asset types and countries hide the map by clicking on hide map click on the create plus button to create a new risk assessment the following steps will show you how to create a new risk assessment write the title of the risk assessment it is a good idea to have a detailed defined structure of the titles as it makes it easier to filter and search across multiple risk assessments for example include the asset's name choose asset type depending on what asset type you are creating a risk assessment for the divisions tab is used to decide who should have access to the risk assessment additionally you can add an individual user who doesn't have access to the chosen division next choose an owner the owner will be notified if anything has been edited in the risk assessment site category can be used to sub-categorize the risk assessment on for example the risk level or criticality of the site if your organization uses the site category questionnaire function you can find out which site category your site should be classified under by taking the questionnaire you can keep a risk assessment active or inactive an inactive risk assessment will not send out notifications we recommend keeping it inactive until the risk assessment is ready for publication add any standards regulatory bodies relevant to the risk assessment in the regulators impacted field the remarks text field can be used to write any remarks about the risk assessment for example background information regarding the building department or other asset specific details you can schedule a review of the risk assessment by adding a review task via the add risk assessment review task button you can track it in the tasks overview in the risk assessment as well as on the main tasks page for more information see the tasks video next enter the location of the risk assessment by searching for the location of the site in the search box we have access to most google maps addresses but not all if you are not able to find the exact address you are searching for search for the area and use the location icon to place it at the exact address additionally you can also edit the address text field below click create note that all required fields must be populated for the create button to change from gray to blue for you to create the risk assessment once you have typed in the information about the risk assessment you will be presented with a new page that shows different tiles that make up a risk assessment the overview tile of the risk assessment shows the information that was typed in while creating the risk assessment the next part of the risk assessment can look a little different depending on for example if any intelligence providers has been chosen by your organization moving on the recommendation box works as an assistant that will give actionable advice based on the available data the incident reports function gives you an overview of all internal incident reports from within your organization and reports if you have access to any external intelligence provider data in this case from the external intelligence provider risk line you can narrow your search by clicking the filter button you will see different search categories you can filter across on internal incident reports you can filter on the start date and end date the date the report was reported on who created it countries incident categories incident types and lastly the range from where your site is located at depending on which external intelligence providers you have access to this may look a little different if you click into the risk line tab you can filter on start and end date risk levels the date the report was reported on countries incident categories and lastly range to the right you can also choose to see multiple layers at once or only one for more information watch the incident reports video moving on to the threats and treatments part of the risk assessment you have two options for creating threats you can either click on the suggested threats button or click on the create threat button click on the suggested threats button to see a list of predefined threats from the threats template you have the option of clicking into each and reading about them by clicking on the little arrow on the left side deselect the ones you find irrelevant by clicking on the check boxes on the right side add the threats to the risk assessment by clicking on the import button at the bottom of the page afterward click on each threat to assess the likelihood and consequence of the threat this part can look different for some users depending on the choice of the individual organizations the consequence is divided into human operations and reputation human meaning the consequence it would have on people operations meaning the consequence it would have for your company's operations lastly reputation meaning the consequence it would have to your company's reputation on this heat matrix you will get a better idea of what the different numbers ranging from 1 to 5 represent you can also see what the different colors represent edit the information about the threat if needed lastly the information edited will be auto-saved click on create threat button to create your own threat fill in the information regarding the threat manually and assess the likelihood and consequence like before notice once you have added all the relevant threats and assess the likelihood and consequence of each one of them the colored dots will change in color threat level is a result of likelihood multiplied by consequence from when you are creating the threat the result is divided into the following 3 levels 0 to 4 is low and is green 5 to 11 is medium and is yellow 12 to 25 is high and is red now start adding the treatments that are necessary to reduce the risk levels treatments are elements that are designed to mitigate the threat we have chosen to use the terminology from the iso 31000 standard and called it treatments it can also be called mitigating measures security controls or just controls right next to the threats panel you have the treatments panel when you click here you have two options for creating a treatment just like with threats click on the suggested treatments button and you will be able to see predefined treatments from the treatments template click into each to read about them by clicking on the little arrow on the left side deselect the ones you find irrelevant by clicking on the check boxes next click import all these treatments are added as not implemented click on each and edit them notice the information regarding the treatment is already filled in next assign the person responsible for the treatment you can find another user who has access to this risk assessment indicate whether the treatment is implemented in progress not implemented or not implemented accepted risk if the treatment is not implemented or in progress select a deadline select not implemented accepted risk if the treatment is not implemented or in progress select a deadline select not implemented accepted risk if this treatment deliberately has not been decided to be implemented this option requires to leave a comment you can add a task directly to a treatment by clicking on the add task button you can also add tasks on an overall level to a risk assessment for example if something that needs remediation has been identified or by using tasks to manage recurring reviews of the site or the risk assessment itself all tasks can be seen on the task manager page please watch the tasks video for more details indicate how effective this treatment is at mitigating each threat you have already added click on none low medium or high on each of the threats depending on how effective the treatment is on each threat additionally add any relevant files by clicking on the files tab click on the create treatment button to create your own treatment fill in the information regarding the treatment manually and follow the same steps as the one shown before in the suggested treatments part of the video click back to the threats tab and you will be able to see that each threat under the threat panel has colored dots indicating the threat level risk level and residual risk level implemented treatments affect the risk level whereas not implemented and in progress treatments affect the residual risk levels a high threat level will be reduced to a medium risk level if the average effect of implemented treatments is medium a high threat level will be reduced to a low risk level if the average effect is high etc in the conclusion section you can add an executive summary to your risk assessment by clicking here the comments section gives you the ability to send comments to another user by using the at sign before their name the mentioned user will receive an email notification comments can ensure a full audit trial of decisions and key communication on the risk assessment which prevents information from disappearing in individuals email inboxes add files to the risk assessment by clicking on files or dragging the file and dumping it here each file can maximum be 50 megabytes there is no limit on file type lastly you have the option of editing existing risk assessments you have access to by clicking on the edit button on the risk assessments page you can also archive them by clicking on the trash button we can retrieve them if they are archived by mistake [Music] you