When managing a primary information asset (e.g., the core process of "order processing"), it relies on secondary information assets (infrastructure, software, personnel). If I create a risk scenario for both the primary and the secondary asset, both risks are recorded but have no impact on one another (individual asset linking is currently not possible).
If the risk scenario for the secondary asset worsens, the change in risk affects only that secondary asset, as I cannot link the primary information asset to the secondary one.
In reality, however, a high risk associated with a secondary asset can potentially increase the risk to the primary asset as well.
Such a link would allow for the propagation of risks and reflect the reality of the situation.
Without this function, we have to painstakingly figure out for yourself which processes are linked to this asset and then re-evaluate the risk across the board.
Note: Even if the risk would no propagate, the link is already helpful to identify connected assets.
Please authenticate to join the conversation.
Open
Feature Request
Risk register
About 1 hour ago

Johannes Renk
Get notified by email when there are changes.
Open
Feature Request
Risk register
About 1 hour ago

Johannes Renk
Get notified by email when there are changes.