How to: add a (generic) risk

You are able to determine a generic risk that can be used later on when you identify a risk linked to a specific stakeholder, IM system, and processing activity,…

For example, a generic risk can be “hacking”. Whenever you are evaluating specific topics such as IM System X, you can specify this risk as an identified risk “hacking of IM system X”.

You are able to create generic risks within the risk dictionary, as well as during risk assessments such as a TIA or DPIA.

RISK DICTIONARY

1. Go to My Organization > Risk Strategy > Risk Dictionary
2. Click “+ add risk” in the upper right corner
3. Choose a name for your risk
4. Describe the risk
5. Select various risk types that are applicable. If yours is not listed, click the plus sign to create a new one.
6. Click “save & exit”

The number of implementations refers to the number of times you linked the generic risk to an identified one. When you open your generic risk, a summary table of the identified risk will be visible.

RISK ASSESSMENT

Whether you perform a TIA or DPIA, you always follow the same steps:

You start with identifying a generic risk followed by specifying it for the case that you are working on. You can choose a risk that is already in your risk dictionary via a drop-down menu. If your generic risk is not available, you can also add a new one.

1. Click on the “+” sign
2. Fill in the requested details: name, description and type (see picture below)
3. Click “submit”